open read write)))
(allow guix_daemon_t
guix_daemon_conf_t
- (lnk_file (create getattr rename unlink)))
+ (lnk_file (create getattr rename unlink read)))
(allow guix_daemon_t net_conf_t
(file (getattr open read)))
(allow guix_daemon_t net_conf_t
(allow guix_daemon_t
cache_home_t
(dir (search)))
+ (allow guix_daemon_t
+ cache_home_t
+ (lnk_file (getattr read)))
;; self upgrades
(allow guix_daemon_t
;; Socket operations
(allow guix_daemon_t
guix_daemon_socket_t
- (sock_file (unlink)))
+ (sock_file (unlink write)))
(allow guix_daemon_t
init_t
(fd (use)))