Skip to content

Commit

Permalink
Allow vmtools_unconfined_t domain transition to rpm_script_t
Browse files Browse the repository at this point in the history
VMware allow option to installing packages outside
the VMware guest through vmtools_unconfined file.
So vmtools_unconfined_t need allow domain transition
for installing rpm packages.Allow  process transition
from vmtools_unconfined_t domain to rpm_script_t domain.

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1872245
  • Loading branch information
Koncpa authored and zpytela committed Aug 27, 2021
1 parent 4756a39 commit 2014a2e
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions policy/modules/contrib/vmtools.te
Expand Up @@ -130,6 +130,10 @@ optional_policy(`
corecmd_shell_entry_type(vmtools_unconfined_t)
corecmd_shell_domtrans(vmtools_t, vmtools_unconfined_t)

optional_policy(`
rpm_transition_script(vmtools_unconfined_t, system_r)
')

optional_policy(`
unconfined_domain(vmtools_unconfined_t)
')
Expand Down

0 comments on commit 2014a2e

Please sign in to comment.