dracut.te: Use libs_run_ldconfig() instead of exec.

Signed-off-by: Jonathan Davies <[email protected]>
perfinion · Jun 14, 2021 · 5f184e2 · 5f184e2
1 parent 91e923a
commit 5f184e2
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/policy/modules/contrib/dracut.te b/policy/modules/contrib/dracut.te
@@ -16,6 +16,9 @@ logging_log_file(dracut_var_log_t)
 type dracut_tmp_t;
 files_tmp_file(dracut_tmp_t)
 
+attribute_role dracut_roles;
+role dracut_roles types dracut_t;
+
 ########################################
 #
 # Local policy
@@ -68,7 +71,7 @@ files_unconfined(dracut_t)
 
 fs_getattr_xattr_fs(dracut_t)
 
-libs_exec_ldconfig(dracut_t)
+libs_run_ldconfig(dracut_t, dracut_roles)
 libs_exec_ld_so(dracut_t)
 libs_exec_lib_files(dracut_t)