Merge pull request #775 from matt-sheets/masheets/init-siginh

Allow systemd to pass down sig mask
SELinuxProject · Apr 30, 2024 · 0296845 · 0296845
2 parents f889384 + 2a261f9
commit 0296845
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
@@ -189,6 +189,7 @@ interface(`init_domain',`
 
  allow $1 init_t:unix_stream_socket { getattr read write ioctl };
 
+ allow init_t $1:process siginh;
  allow init_t $1:process2 { nnp_transition nosuid_transition };
 
  # StandardInputText uses a memfd rw shm segment.