1 2 3 4 5 6 7 8 9 10 11 12 13
|
Index: refpolicy-2.20241008/policy/modules/services/cups.te
===================================================================
--- refpolicy-2.20241008.orig/policy/modules/services/cups.te
+++ refpolicy-2.20241008/policy/modules/services/cups.te
@@ -95,7 +95,7 @@ ifdef(`enable_mls',`
# Cups local policy
#
-allow cupsd_t self:capability { chown dac_override dac_read_search fowner fsetid ipc_lock kill setgid setuid sys_admin sys_rawio sys_resource sys_tty_config };
+allow cupsd_t self:capability { chown dac_override dac_read_search fowner fsetid ipc_lock kill setgid setuid sys_rawio sys_resource sys_tty_config };
dontaudit cupsd_t self:capability { net_admin sys_tty_config };
allow cupsd_t self:capability2 { block_suspend wake_alarm };
allow cupsd_t self:process { getpgid setpgid setsched signal_perms };
|