init: allow systemd setattr on kanidm-unixd cache dirs

Signed-off-by: Kenton Groombridge <[email protected]>
0xC0ncord · Jul 1, 2024 · d3ccca2 · d3ccca2
1 parent 0b3790c
commit d3ccca2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
@@ -600,6 +600,11 @@ ifdef(`init_systemd',`
 		container_remount_fs(init_t)
 	')
 
+	optional_policy(`
+		# for systemd unit CacheDirectoryMode
+		kanidm_setattr_unixd_cache_dirs(init_t)
+	')
+
 	optional_policy(`
 		systemd_dbus_chat_logind(init_t)
 		systemd_create_logind_linger_dir(init_t)