Skip to content
This repository has been archived by the owner on Jul 2, 2018. It is now read-only.

Verify kernel_dgram_send() in init_daemon_domain(). #9

Open
pebenito opened this issue Oct 20, 2015 · 1 comment
Open

Verify kernel_dgram_send() in init_daemon_domain(). #9

pebenito opened this issue Oct 20, 2015 · 1 comment
Labels

Comments

@pebenito
Copy link
Contributor

In the init_systemd block of init_daemon_domain, kernel_dgram_send($1) is included. This may be journald-specific. Revisit this access.

@pebenito pebenito changed the title Verify init_daemon_domain kernel_dgram_send. Verify kernel_dgram_send() in init_daemon_domain(). Oct 20, 2015
@ghost
Copy link

ghost commented Oct 30, 2015

actually its not just the above only. It seems that systemd notify clients (those using the notify socket to dgram sendto systemd) also need to be able to dgram sendto kernel_t.

I did not see this because most notify clients are also journal clients and journal clients also do this

So i still wouldnt have associated this with all init daemons but its not just a journal client thing

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

1 participant