commit: 436c4b774fc27c4545a838cdacd84bc5d0dab824 Author: Chris PeBenito <chpebeni <AT> linux <DOT> microsoft <DOT> com> AuthorDate: Tue Feb 7 21:02:01 2023 +0000 Commit: Kenton Groombridge <concord <AT> gentoo <DOT> org> CommitDate: Mon Feb 13 15:24:08 2023 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=436c4b77
iscsi: Read initiatorname.iscsi. This is normally created by iscsi-init.service. Signed-off-by: Chris PeBenito <chpebeni <AT> linux.microsoft.com> Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org> policy/modules/system/iscsi.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/iscsi.te b/policy/modules/system/iscsi.te index 171bfe85a..cf70f6d3f 100644 --- a/policy/modules/system/iscsi.te +++ b/policy/modules/system/iscsi.te @@ -90,6 +90,8 @@ dev_rw_userio_dev(iscsid_t) domain_use_interactive_fds(iscsid_t) domain_dontaudit_read_all_domains_state(iscsid_t) +files_read_etc_runtime_files(iscsid_t) + auth_use_nsswitch(iscsid_t) init_stream_connect_script(iscsid_t)
