commit: f993307d3d070eb457f5ceb2da37c395d61ce630
Author: Jonathan Davies <jpds <AT> protonmail <DOT> com>
AuthorDate: Tue Apr 6 09:30:18 2021 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Nov 21 23:14:37 2021 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f993307d
getty.te: Allow access to search /var/lib/.
Signed-off-by: Jonathan Davies <jpds <AT> protonmail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/modules/system/getty.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/policy/modules/system/getty.te b/policy/modules/system/getty.te
index e6e76a93..724e31ad 100644
--- a/policy/modules/system/getty.te
+++ b/policy/modules/system/getty.te
@@ -100,6 +100,8 @@ ifdef(`distro_gentoo',`
# Gentoo default /etc/issue makes agetty
# do a DNS lookup for the hostname
sysnet_dns_name_resolve(getty_t)
+
+ files_search_var_lib(getty_t)
')
ifdef(`distro_ubuntu',`
