Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

systemd: various changes #842

Merged
merged 4 commits into from
Jan 6, 2025
Merged

systemd: various changes #842

merged 4 commits into from
Jan 6, 2025

Conversation

WavyEbuilder
Copy link
Contributor

systemd stores some early boot log files here, such as the userspace measurement event log for TPMs. The logfiles stored here aren't sensitive enough to warrant their own type, so let's just reuse systemd_log_t.

systemd stores some early boot log files here, such as the userspace
measurement event log for TPMs. The logfiles stored here aren't
sensitive enough to warrant their own type, so let's just reuse
systemd_log_t.

Signed-off-by: Rahul Sandhu <[email protected]>
When systemd automounts the boot or efi partition using autofs,
bootloader_t needs to be able to do a getattr on it.

Signed-off-by: Rahul Sandhu <[email protected]>
@WavyEbuilder WavyEbuilder changed the title systemd: appropriately label /run/log/systemd as systemd_log_t systemd: various changes Dec 12, 2024
@WavyEbuilder
Copy link
Contributor Author

I've added a few more commits to this PR instead of opening loads of PRs for separate commits, so I've changed the title. I hope that's okay.

When the systemd_logind_get_bootloader boolean is set, allow
systemd-logind to perform getattr for autofs_t, as systemd may mount the
bootloader partition automatically, giving it autofs_t.

Signed-off-by: Rahul Sandhu <[email protected]>
@pebenito
Copy link
Member

pebenito commented Jan 6, 2025

I've added a few more commits to this PR instead of opening loads of PRs for separate commits, so I've changed the title. I hope that's okay.

That's fine for these tiny changes.

@pebenito pebenito merged commit cc1f455 into SELinuxProject:main Jan 6, 2025
118 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants