Fixed homework HOME_ROOT dir creation

fedora-selinux · Sep 13, 2024 · 86e198c · 86e198c
1 parent 7edaac6
commit 86e198c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/policy/modules/contrib/virt.te b/policy/modules/contrib/virt.te
@@ -2280,6 +2280,7 @@ optional_policy(`
 
 optional_policy(`
 	systemd_dbus_chat_machined(virtqemud_t)
+	systemd_homed_stream_connect(virtqemud_t)
 ')
 
 optional_policy(`

diff --git a/policy/modules/system/systemd-homed.te b/policy/modules/system/systemd-homed.te
@@ -166,6 +166,7 @@ allow systemd_homework_t self:user_namespace create;
 allow systemd_homework_t systemd_homed_t:unix_dgram_socket sendto;
 
 # /var/home
+files_create_home_dir(systemd_homework_t)
 files_delete_home_dir(systemd_homework_t)
 files_search_home(systemd_homework_t)
 files_home_filetrans(systemd_homework_t, systemd_homed_crypto_luks_t, file)
@@ -250,6 +251,7 @@ optional_policy(`
 
 optional_policy(`
     # labeled home directories
+    userdom_home_filetrans_user_home_dir(systemd_homework_t)
     userdom_home_manager(systemd_homework_t)
     userdom_manage_home_role(system_r, systemd_homework_t)
 ')