From 4b0445821d3a9da3c0c6ae7aec308e80f2ac4b7c Mon Sep 17 00:00:00 2001 From: Rafal Krypa Date: Tue, 10 Mar 2015 10:48:08 +0100 Subject: [PATCH] Fix grant all privileges to programs with "User" and "System" Smack labels Cynara rules for granting said policy was added to the wrong bucket. Another bucket, with default "Deny" policy was shadowing them. Adding the rules to the proper bucket now. Change-Id: Iec6b3bd093e89c8b3629994681871c94f797187b Signed-off-by: Rafal Krypa --- policy/security-manager-policy-reload | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/security-manager-policy-reload b/policy/security-manager-policy-reload index 5a78f2d..274c49c 100755 --- a/policy/security-manager-policy-reload +++ b/policy/security-manager-policy-reload @@ -56,7 +56,7 @@ done # Non-application programs get access to all privileges for client in User System do - cyad --set-policy --bucket=MAIN --client="$client" --user="*" --privilege="*" --type=ALLOW + cyad --set-policy --bucket=MANIFESTS --client="$client" --user="*" --privilege="*" --type=ALLOW done # Load privilege-group mappings -- 2.7.4