systemd: add networkd rules required at least since version 256

systemd-network-generator.service unit fails without: fs_list_tmpfs(systemd_networkd_t) allow rw to /sys/fs/cgroup/system.slice/systemd-networkd.service/memory.pressure fs_rw_cgroup_files(systemd_networkd_t) Signed-off-by: Marc Schiffbauer <[email protected]>
gentoo · Nov 26, 2024 · a37bce2 · a37bce2
1 parent d5d2995
commit a37bce2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
@@ -1323,6 +1323,8 @@ fs_getattr_all_fs(systemd_networkd_t)
 fs_search_cgroup_dirs(systemd_networkd_t)
 fs_read_nsfs_files(systemd_networkd_t)
 fs_watch_memory_pressure(systemd_networkd_t)
+fs_list_tmpfs(systemd_networkd_t)
+fs_rw_cgroup_files(systemd_networkd_t)
 
 auth_use_nsswitch(systemd_networkd_t)