Allow ssh generator work with systemd unit files

Resolves: RHEL-72549
zpytela · Jan 8, 2025 · fccee97 · fccee97
1 parent 3ae9a5e
commit fccee97
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
@@ -1293,6 +1293,7 @@ init_exec_script_files(systemd_rc_local_generator_t)
 ### ssh generator
 allow systemd_ssh_generator_t self:vsock_socket create;
 allow systemd_ssh_generator_t vsock_device_t:chr_file { read_chr_file_perms };
+allow systemd_ssh_generator_t systemd_unit_file_t:file { create_file_perms rw_file_perms };
 
 kernel_read_sysctl(systemd_ssh_generator_t)