Allow kpatch_t domain to communicate with policykit_t domsin over dbus

fedora-selinux · Mar 1, 2019 · f7497fd · f7497fd
1 parent f3d523a
commit f7497fd
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/kpatch.te b/kpatch.te
@@ -30,6 +30,10 @@ corecmd_mmap_bin_files(kpatch_t)
 
 dev_list_sysfs(kpatch_t)
 
+optional_policy(`
+    dbus_send_system_bus(kpatch_t)
+')
+
 optional_policy(`
     unconfined_domain(kpatch_t)
 ')