Add selinux to allow map for pamdatabase from unix_chkpwd

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-12-12 15:42:02 +00:00
parent 9f4175b53b
commit c9817d2b47
3 changed files with 28 additions and 0 deletions

Binary file not shown.

View file

@ -0,0 +1,11 @@
module mapchkpwd 1.0;
require {
type chkpwd_t;
type shadow_t;
class file map;
}
#============= chkpwd_t ==============
allow chkpwd_t shadow_t:file map;