Allow setsebool_t relabel selinux data files

zpytela · Aug 29, 2024 · 74c5b06 · 74c5b06
1 parent c8d8d4f
commit 74c5b06
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te
@@ -579,9 +579,15 @@ optional_policy(`
 #
 # setsebool local policy
 #
+allow setsebool_t file_context_t:file { relabelfrom relabelto };
+allow setsebool_t selinux_config_t:file { relabelfrom relabelto };
+allow setsebool_t semanage_store_t:dir { relabelfrom relabelto };
+allow setsebool_t semanage_store_t:file { relabelfrom relabelto };
+
 seutil_semanage_policy(setsebool_t)
 selinux_set_all_booleans(setsebool_t)
 
+domain_obj_id_change_exemption(setsebool_t)
 init_dontaudit_use_fds(setsebool_t)
 
 # Bug in semanage