| 1 | From 3307c8bf8ec5b8ae117f4fe9faf40c09f08edfb5 Mon Sep 17 00:00:00 2001
|
| 2 | From: Aelin <[email protected]>
|
| 3 | Date: Sat, 12 Sep 2026 13:40:55 +0200
|
| 4 | Subject: [PATCH 07/10] Allow systemd-timesyncd to read network sysctls
|
| 5 |
|
| 6 | systemd-timesyncd reads the value of
|
| 7 | /proc/sys/net/ipv6/conf/all/disable_ipv6, which is currently not
|
| 8 | allowed.
|
| 9 | ---
|
| 10 | policy/modules/system/systemd.te | 2 ++
|
| 11 | 1 file changed, 2 insertions(+)
|
| 12 |
|
| 13 | diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
|
| 14 | index f38ff3a0e..5e97bc2fe 100644
|
| 15 | |
| 16 | |
| 17 | @@ -1228,7 +1228,9 @@ allow systemd_timedated_t systemd_networkd_var_run_t:dir watch_dir_perms;
|
| 18 | list_dirs_pattern(systemd_timedated_t, systemd_networkd_var_run_t, systemd_networkd_var_run_t)
|
| 19 | read_files_pattern(systemd_timedated_t, systemd_networkd_var_run_t, systemd_networkd_var_run_t)
|
| 20 |
|
| 21 | +kernel_read_net_sysctls(systemd_timedated_t)
|
| 22 | kernel_rw_psi(systemd_timedated_t)
|
| 23 | +kernel_search_network_sysctl(systemd_timedated_t)
|
| 24 |
|
| 25 | corecmd_exec_bin(systemd_timedated_t)
|
| 26 | corecmd_exec_shell(systemd_timedated_t)
|
| 27 | --
|
| 28 | 2.55.0
|
| 29 |
|