AimeeOS
/
aimee-os
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SELinux: Allow init-storage to set permissions 

Files and directories that have restrictive permissions and/or are now
owned by *root:root* require `cp` to have additional process
capabilities in order to copy them to the writable filesystem.
gentoo
Dustin 2023-03-29 11:03:32 -05:00
parent d1db08966d
commit a1999939eb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
repos/aimee-os/sec-policy/selinux-aimee-os/files/aimee-os.te
View File

@ -36,7 +36,7 @@ files_tmp_file(aimee_set_root_password_tmp_t)
#
allow aimee_storinit_t self:fifo_file rw_fifo_file_perms;
allow aimee_storinit_t self:capability { chown fsetid sys_admin };
allow aimee_storinit_t self:capability { dac_read_search dac_override chown fowner fsetid sys_admin };
allow aimee_storinit_t self:process { setfscreate };
manage_dirs_pattern(aimee_storinit_t, aimee_storinit_runtime_t, aimee_storinit_runtime_t)