diff options
| author | Debarshi Ray <debarshir@gnome.org> | 2022-07-14 15:43:06 +0200 |
|---|---|---|
| committer | Phaedrus Leeds <mwl458@gmail.com> | 2022-07-20 20:43:54 -0500 |
| commit | 0329f657ee2d61aa8add65ad6b28cb9c8b35f1dd (patch) | |
| tree | 9014805ba534b41814c6346d0042850f08799069 | |
| parent | f0c1097690a5b84dd2334e246c47655114817d71 (diff) | |
| download | flatpak-0329f657ee2d61aa8add65ad6b28cb9c8b35f1dd.tar.gz | |
selinux: Permit read access to symbolic links in /var/lib/flatpak
Commit 8617ab0ad0243f5a granted read and lock access to
/var/lib/flatpak but didn't cover symbolic links. This explicitly
permits that to avoid running into SELinux denials.
https://bugzilla.redhat.com/show_bug.cgi?id=2071215
| -rw-r--r-- | selinux/flatpak.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/selinux/flatpak.te b/selinux/flatpak.te index 66ebcaa1..bb3d80e3 100644 --- a/selinux/flatpak.te +++ b/selinux/flatpak.te @@ -15,6 +15,7 @@ init_daemon_domain(flatpak_helper_t, flatpak_helper_exec_t) auth_read_passwd(flatpak_helper_t) files_list_var_lib(flatpak_helper_t) files_read_var_lib_files(flatpak_helper_t) +files_read_var_lib_symlinks(flatpak_helper_t) ifdef(`corecmd_watch_bin_dirs',` corecmd_watch_bin_dirs(flatpak_helper_t) |