etc: Add more SELinux permissions for the daemon.

* etc/guix-daemon.cil.in (guix_daemon): Permit write on guix_daemon_conf_t sock_file, necessary for garbage collection.
2022-01-24 11:26:07 +01:00 · 2022-01-24 11:26:07 +01:00 · 98e74d520a
commit 98e74d520a
parent 5664a64e51
1 changed files with 3 additions and 0 deletions
--- a/etc/guix-daemon.cil.in
+++ b/etc/guix-daemon.cil.in
@ -302,6 +302,9 @@
  (allow guix_daemon_t
         guix_daemon_conf_t
         (lnk_file (create getattr rename unlink read)))
+  (allow guix_daemon_t
+         guix_daemon_conf_t
+         (sock_file (write)))
  (allow guix_daemon_t net_conf_t
         (file (getattr open read)))
  (allow guix_daemon_t net_conf_t