commit: ffab4e60223f7e4c8a8fbb2995a4c468e902a278 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Sat Jun 27 15:02:57 2015 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sat Jun 27 15:02:57 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=ffab4e60
Gentoo has chronyd keyfile by default in /etc/chrony/ policy/modules/contrib/chronyd.fc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/policy/modules/contrib/chronyd.fc b/policy/modules/contrib/chronyd.fc index 4e4143e..fd5fbbb 100644 --- a/policy/modules/contrib/chronyd.fc +++ b/policy/modules/contrib/chronyd.fc @@ -11,3 +11,7 @@ /var/run/chronyd(/.*) gen_context(system_u:object_r:chronyd_var_run_t,s0) /var/run/chronyd\.pid -- gen_context(system_u:object_r:chronyd_var_run_t,s0) /var/run/chronyd\.sock -s gen_context(system_u:object_r:chronyd_var_run_t,s0) + +ifdef(`distro_gentoo',` +/etc/chrony/chrony\.keys -- gen_context(system_u:object_r:chronyd_keys_t,s0) +')
