diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 68fb1a148e..6054b50386 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -29,7 +29,6 @@ template(`systemd_role_template',` type systemd_user_runtime_t, systemd_user_runtime_notify_t; type systemd_user_unit_t; type systemd_user_runtime_unit_t, systemd_user_transient_unit_t; - type systemd_machined_t; ') ################################# @@ -151,10 +150,9 @@ template(`systemd_role_template',` allow $3 systemd_user_runtime_t:sock_file { manage_sock_file_perms relabel_sock_file_perms }; # for "machinectl shell" - allow $1_systemd_t systemd_machined_t:fd use; - allow $3 systemd_machined_t:fd use; - allow $3 systemd_machined_t:dbus send_msg; - allow systemd_machined_t $3:dbus send_msg; + systemd_use_inherited_machined_ptys($1_systemd_t) + systemd_use_inherited_machined_ptys($3) + systemd_dbus_chat_machined($3) allow $3 systemd_user_runtime_notify_t:sock_file { manage_sock_file_perms relabel_sock_file_perms };