03/07: etc: SELinux: Allow init process to setattr on profile directories.

[guix-commits]

rekado pushed a commit to branch master
in repository guix.

commit afaeb657b118e6998342110deab8c8110b824417
Author: Ricardo Wurmus <rekado@elephly.net>
AuthorDate: Fri Dec 23 16:48:20 2022 +0100

    etc: SELinux: Allow init process to setattr on profile directories.
    
    * etc/guix-daemon.cil.in: Add rule.
---
 etc/guix-daemon.cil.in | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/etc/guix-daemon.cil.in b/etc/guix-daemon.cil.in
index 0245c36231..f55ef226c1 100644
--- a/etc/guix-daemon.cil.in
+++ b/etc/guix-daemon.cil.in
@@ -94,6 +94,9 @@
   (allow init_t
          guix_store_content_t
          (file (open read execute)))
+  (allow init_t
+         guix_profiles_t
+         (dir (setattr)))
 
   ;; guix-daemon needs to know the names of users
   (allow guix_daemon_t