Skip to content
Snippets Groups Projects
Commit 190c704d authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Allow healthd to read/write /dev/__null_.


init creates a private /dev/null instance named /dev/__null__
that is inherited by healthd.  Since it is created prior to
initial policy load, it is left in the tmpfs type.
Allow healthd to inherit and use the open fd.

Change-Id: I525fb4527766d0780457642ebcc19c0fcfd1778c
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 129f8df9
No related branches found
No related tags found
No related merge requests found
......@@ -6,6 +6,9 @@ type healthd_exec, exec_type, file_type;
init_daemon_domain(healthd)
allow healthd rootfs:file { read entrypoint };
write_klog(healthd)
# /dev/__null__ created by init prior to policy load,
# open fd inherited by healthd.
allow healthd tmpfs:chr_file { read write };
allow healthd self:capability { net_admin mknod };
allow healthd self:capability2 block_suspend;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment