dracut.te: Use libs_run_ldconfig() instead of exec.

Signed-off-by: Jonathan Davies <[email protected]>
perfinion · Jun 14, 2021 · 1c05d33 · 1c05d33
1 parent 8348287
commit 1c05d33
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/policy/modules/contrib/dracut.te b/policy/modules/contrib/dracut.te
@@ -13,6 +13,9 @@ logging_log_file(dracut_var_log_t)
 type dracut_tmp_t;
 files_tmp_file(dracut_tmp_t)
 
+attribute_role dracut_roles;
+role dracut_roles types dracut_t;
+
 ########################################
 #
 # Local policy
@@ -65,7 +68,7 @@ files_unconfined(dracut_t)
 
 fs_getattr_xattr_fs(dracut_t)
 
-libs_exec_ldconfig(dracut_t)
+libs_run_ldconfig(dracut_t, dracut_roles)
 libs_exec_ld_so(dracut_t)
 libs_exec_lib_files(dracut_t)