Merge pull request #3311 from zmrow/networkd-selinux

selinux: Add `network_exec` label for systemd-networkd
bottlerocket-os · Aug 4, 2023 · bbf8402 · bbf8402
2 parents b437756 + da72038
commit bbf8402
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/selinux-policy/fs.cil b/packages/selinux-policy/fs.cil
@@ -51,6 +51,7 @@
 (filecon "/.*/usr/sbin/chronyd" file clock_exec)
 (filecon "/.*/usr/sbin/wicked.*" file network_exec)
 (filecon "/.*/usr/libexec/wicked/bin/wicked.*" file network_exec)
+(filecon "/.*/usr/lib/systemd/systemd-networkd.*" file network_exec)
 (filecon "/.*/usr/bin/containerd.*" file runtime_exec)
 (filecon "/.*/usr/bin/docker.*" file runtime_exec)
 (filecon "/.*/usr/bin/host-ctr" file runtime_exec)