diff --git a/healthd.te b/healthd.te index 9d23571323369bf3affd332fb4e5525c4111e2c2..b5ba6b97a5ea913392826aa95eb22925a4dfd783 100644 --- a/healthd.te +++ b/healthd.te @@ -6,6 +6,9 @@ type healthd_exec, exec_type, file_type; init_daemon_domain(healthd) allow healthd rootfs:file { read entrypoint }; write_klog(healthd) +# /dev/__null__ created by init prior to policy load, +# open fd inherited by healthd. +allow healthd tmpfs:chr_file { read write }; allow healthd self:capability { net_admin mknod }; allow healthd self:capability2 block_suspend;