From 5d8386f073adf1b835461382844738aca74cab74 Mon Sep 17 00:00:00 2001
From: guoxiaoqi <guoxiaoqi2@huawei.com>
Date: Wed, 26 Feb 2020 11:48:12 +0800
Subject: [PATCH] add avc for systemd-hostnamed and systemd-logind

Signed-off-by: guoxiaoqi <guoxiaoqi2@huawei.com>
---
 policy/modules/system/systemd.te | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index d6ce679..f2919f0 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1140,5 +1140,11 @@ optional_policy(`
 optional_policy(`
     gpg_exec(systemd_importd_t)
 ')
+
+# avc for openEuler
 allow init_t systemd_logind_inhibit_var_run_t:dir mounton;
 allow init_t systemd_logind_sessions_t:dir mounton;
+allow init_t systemd_logind_var_lib_t:dir { create mounton read };
+allow init_t systemd_logind_var_run_t:dir mounton;
+init_nnp_daemon_domain(systemd_hostnamed_t)
+init_nnp_daemon_domain(systemd_logind_t)
-- 
1.8.3.1