diff options
| -rw-r--r-- | etc/guix-daemon.cil.in | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/etc/guix-daemon.cil.in b/etc/guix-daemon.cil.in index f55ef226c16..b221e310942 100644 --- a/etc/guix-daemon.cil.in +++ b/etc/guix-daemon.cil.in | |||
| @@ -176,6 +176,11 @@ | |||
| 176 | execute_no_trans read write open entrypoint map | 176 | execute_no_trans read write open entrypoint map |
| 177 | getattr link unlink))) | 177 | getattr link unlink))) |
| 178 | 178 | ||
| 179 | ;; Remounting /gnu/store read-write. | ||
| 180 | (allow guix_daemon_t | ||
| 181 | fs_t | ||
| 182 | (filesystem (remount))) | ||
| 183 | |||
| 179 | ;; TODO: unknown | 184 | ;; TODO: unknown |
| 180 | (allow guix_daemon_t | 185 | (allow guix_daemon_t |
| 181 | root_t | 186 | root_t |
| @@ -223,6 +228,9 @@ | |||
| 223 | (allow guix_daemon_t | 228 | (allow guix_daemon_t |
| 224 | tmpfs_t | 229 | tmpfs_t |
| 225 | (file (create open read unlink write))) | 230 | (file (create open read unlink write))) |
| 231 | (allow guix_daemon_t ;same as above, but with tmp_t | ||
| 232 | tmp_t | ||
| 233 | (file (create open read unlink write))) | ||
| 226 | (allow guix_daemon_t | 234 | (allow guix_daemon_t |
| 227 | tmpfs_t | 235 | tmpfs_t |
| 228 | (dir (getattr add_name remove_name write))) | 236 | (dir (getattr add_name remove_name write))) |
