Skip to content

Commit fe293d4

Browse files
committed
testing: allow dracut_t to use CAP_SYS_ADMIN
dracut uses fsfreeze when building an initrd. Signed-off-by: Kenton Groombridge <concord@gentoo.org>
1 parent 94ea16d commit fe293d4

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

testing/sechecker.ini

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,7 @@ exempt_source = acpi_t
103103
dockerd_t # Container engine (namespacing)
104104
dockerd_user_t # Container engine (namespacing)
105105
dphysswapfile_t # Configure swap files
106+
dracut_t # Needed to use fsfreeze when building an initrd
106107
entropyd_t # Add entropy to the system
107108
fapolicyd_t
108109
fsadm_t

0 commit comments

Comments
 (0)