diff options
| author |   Kenton Groombridge <concord@gentoo.org> | 2022-04-19 18:53:44 -0400 |
|---|---|---|
| committer | Kenton Groombridge <concord@gentoo.org> | 2022-09-03 16:04:23 -0400 |
| commit | 7d41f1b7b4f4d675b62835be6d2416eb2368a1a1 (patch) | |
| tree | 65e0bcb5ec15310ffc7087391ba67d37cf197e8b | |
| parent | iptables: add file context for /usr/libexec/nftables/nftables.sh (diff) | |
| download | hardened-refpolicy-7d41f1b7b4f4d675b62835be6d2416eb2368a1a1.tar.gz hardened-refpolicy-7d41f1b7b4f4d675b62835be6d2416eb2368a1a1.tar.bz2 hardened-refpolicy-7d41f1b7b4f4d675b62835be6d2416eb2368a1a1.zip | |
portage: allow portage to map ebuild files
When portage syncs a repo with git, git will mmap() ebuild files. Allow
portage to map ebuild files to fix permission denied errors on syncing.
Bug: https://bugs.gentoo.org/833017
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
| -rw-r--r-- | policy/modules/admin/portage.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te index 869667052..e3a195746 100644 --- a/policy/modules/admin/portage.te +++ b/policy/modules/admin/portage.te @@ -200,6 +200,8 @@ domain_dontaudit_read_all_domains_state(portage_t) files_manage_all_files(portage_t) # eselect uses file, which mmap()s its db files_map_usr_files(portage_t) +# portage executing git mmap()s ebuild files when syncing +allow portage_t portage_ebuild_t:file map; selinux_get_fs_mount(portage_t) |