forked from pool/selinux-policy
- Add fix_container.patch to allow privileged containers to use timedatectl (bsc#1207054) OBS-URL: https://build.opensuse.org/request/show/1057912 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/selinux-policy?expand=0&rev=168
13 lines
461 B
Diff
13 lines
461 B
Diff
Index: fedora-policy-20221019/policy/modules/services/container.te
|
|
===================================================================
|
|
--- fedora-policy-20221019.orig/policy/modules/services/container.te
|
|
+++ fedora-policy-20221019/policy/modules/services/container.te
|
|
@@ -681,6 +681,7 @@ init_dbus_chat(spc_t)
|
|
optional_policy(`
|
|
systemd_dbus_chat_machined(spc_t)
|
|
systemd_dbus_chat_logind(spc_t)
|
|
+ systemd_dbus_chat_timedated(spc_t)
|
|
')
|
|
|
|
optional_policy(`
|