diff --git a/policy-rawhide-base.patch b/policy-rawhide-base.patch index 93b7ccee..7ae858af 100644 --- a/policy-rawhide-base.patch +++ b/policy-rawhide-base.patch @@ -14897,7 +14897,7 @@ index 7be4ddf..d5ef507 100644 +/sys/class/net/ib.* gen_context(system_u:object_r:sysctl_net_t,s0) +/sys/kernel/uevent_helper -- gen_context(system_u:object_r:usermodehelper_t,s0) diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if -index e100d88..7463ed0 100644 +index e100d88..c8e32a2 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -286,7 +286,7 @@ interface(`kernel_rw_unix_dgram_sockets',` @@ -15116,7 +15116,7 @@ index e100d88..7463ed0 100644 ') - read_files_pattern($1, { proc_t sysctl_t sysctl_kernel_t }, sysctl_modprobe_t) -+ read_files_pattern($1, { proc_t sysctl_t sysctl_kernel_t }, usermodehelper) ++ read_files_pattern($1, { proc_t sysctl_t sysctl_kernel_t }, usermodehelper_t) list_dirs_pattern($1, { proc_t sysctl_t }, sysctl_kernel_t) ')