ksud: load profile sepolicy rules when boot

2023-07-01 16:50:10 +08:00
parent 2bb73a2a92
commit a9c33f6940
2 changed files with 30 additions and 2 deletions
--- a/userspace/ksud/src/event.rs
+++ b/userspace/ksud/src/event.rs
@@ -158,6 +158,10 @@ pub fn on_post_data_fs() -> Result<()> {
        warn!("load sepolicy.rule failed");
    }

+    if let Err(e) = crate::profile::apply_sepolies() {
+        warn!("apply root profile sepolicy failed: {}", e);
+    }
+
    // exec modules post-fs-data scripts
    // TODO: Add timeout
    if let Err(e) = crate::module::exec_post_fs_data() {