From 06d3064a993c97b2f6dba5d778ea41c319eb18ef Mon Sep 17 00:00:00 2001 From: Dongsun Lee Date: Sat, 27 Jun 2015 15:29:24 +0900 Subject: [PATCH] allow all clients to access storage socket and ocsp socket Change-Id: I38dc270b4e58cc791a219fb2c46520650f2bba0b Signed-off-by: Dongsun Lee --- systemd/central-key-manager-api-ocsp.socket | 2 +- systemd/central-key-manager-api-storage.socket | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/systemd/central-key-manager-api-ocsp.socket b/systemd/central-key-manager-api-ocsp.socket index b20e7e7..ee5307c 100644 --- a/systemd/central-key-manager-api-ocsp.socket +++ b/systemd/central-key-manager-api-ocsp.socket @@ -1,7 +1,7 @@ [Socket] ListenStream=/tmp/.central-key-manager-api-ocsp.sock SocketMode=0777 -SmackLabelIPIn=key-manager::api-ocsp +SmackLabelIPIn=* SmackLabelIPOut=@ Service=central-key-manager.service diff --git a/systemd/central-key-manager-api-storage.socket b/systemd/central-key-manager-api-storage.socket index 7bc5350..359923c 100644 --- a/systemd/central-key-manager-api-storage.socket +++ b/systemd/central-key-manager-api-storage.socket @@ -1,7 +1,7 @@ [Socket] ListenStream=/tmp/.central-key-manager-api-storage.sock SocketMode=0777 -SmackLabelIPIn=key-manager::api-storage +SmackLabelIPIn=* SmackLabelIPOut=@ Service=central-key-manager.service -- 2.7.4