Inititial flask rules for systemd starting and stoping of services

diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index bf241600e95cad5aa6b8517ea2d6e525d0b99afe..468e0fd9fe2fe169620cb7b174c31bdcba8a43c3 100644 (file)
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -862,3 +862,12 @@ inherits database
        implement
        execute
 }
+
+class service
+{
+       start
+       stop
+       status
+       reload
+       kill
+}

diff --git a/policy/flask/security_classes b/policy/flask/security_classes
index 14a4799114a34c4754d165301a63b8a55d27e4bd..067ecfca787c895bec019e51e7915e631f25f831 100644 (file)
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@@ -131,4 +131,8 @@ class db_view                       # userspace
 class db_sequence              # userspace
 class db_language              # userspace
 
+# systemd services 
+class service 
+
+
 # FLASK