Merge pull request #622 from chrisschnei/zram-permission

systemd-generator: systemd_generator_t load kernel modules used for e…
SELinuxProject · Jul 11, 2023 · bee1bcb · bee1bcb
2 parents c6424be + 26eb377
commit bee1bcb
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
@@ -524,6 +524,8 @@ kernel_dontaudit_getattr_proc(systemd_generator_t)
 # Where an unlabeled mountpoint is encounted:
 kernel_dontaudit_search_unlabeled(systemd_generator_t)
 
+modutils_domtrans(systemd_generator_t)
+
 # write for systemd-zram-generator
 storage_raw_rw_fixed_disk(systemd_generator_t)
 storage_raw_read_removable_device(systemd_generator_t)