From 7533130a5efa09c813e1f23cf3d41d3c05ca2d99 Mon Sep 17 00:00:00 2001 From: Johannes Segitz Date: Mon, 17 Jul 2023 15:57:25 +0200 Subject: [PATCH] selinux: call init_nnp_daemon_domain for domain to allow for systemd hardenings to be applied to the daemon --- selinux/tabrmd.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/selinux/tabrmd.te b/selinux/tabrmd.te index 8996a46a..efd23367 100644 --- a/selinux/tabrmd.te +++ b/selinux/tabrmd.te @@ -9,7 +9,7 @@ gen_tunable(`tabrmd_connect_all_unreserved', false) type tabrmd_t; type tabrmd_exec_t; -init_daemon_domain(tabrmd_t, tabrmd_exec_t) +init_nnp_daemon_domain(tabrmd_t, tabrmd_exec_t) allow tabrmd_t self:unix_dgram_socket { create_socket_perms };