Merge pull request #836 from dsugar100/locale_dbus

Communicate with locale via dbus
SELinuxProject · Nov 18, 2024 · df2d2ef · df2d2ef
2 parents cc6ce5d + 347da28
commit df2d2ef
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
@@ -1521,6 +1521,27 @@ interface(`systemd_signull_logind',`
 	allow $1 systemd_logind_t:process signull;
 ')
 
+########################################
+## <summary>
+##   Send and receive messages from
+##   systemd locale over dbus.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`systemd_dbus_chat_locale',`
+	gen_require(`
+		type systemd_locale_t;
+		class dbus send_msg;
+	')
+
+	allow $1 systemd_locale_t:dbus send_msg;
+	allow systemd_locale_t $1:dbus send_msg;
+')
+
 ########################################
 ## <summary>
 ##  List the contents of systemd userdb runtime directories.

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
@@ -884,12 +884,15 @@ miscfiles_read_localization(systemd_journal_init_t)
 kernel_read_kernel_sysctls(systemd_locale_t)
 
 files_read_etc_files(systemd_locale_t)
+files_read_usr_files(systemd_locale_t)
 
 fs_getattr_all_fs(systemd_locale_t)
 fs_search_cgroup_dirs(systemd_locale_t)
 
 init_stream_connect(systemd_locale_t)
 
+miscfiles_read_localization(systemd_locale_t)
+
 selinux_use_status_page(systemd_locale_t)
 
 seutil_read_file_contexts(systemd_locale_t)