diff --git a/refpolicy/policy/modules/system/selinux.te b/refpolicy/policy/modules/system/selinux.te index 635d80ba..54ddfd64 100644 --- a/refpolicy/policy/modules/system/selinux.te +++ b/refpolicy/policy/modules/system/selinux.te @@ -321,6 +321,10 @@ libraries_read_shared_libraries(restorecon_t) logging_send_system_log_message(restorecon_t) +optional_policy(`hotplug.te',` +hotplug_use_file_descriptors(restorecon_t) +') + # relabeling rules files_read_all_directories(restorecon_t) kernel_relabel_unlabeled_object(restorecon_t) diff --git a/refpolicy/policy/modules/system/selinuxutil.te b/refpolicy/policy/modules/system/selinuxutil.te index 635d80ba..54ddfd64 100644 --- a/refpolicy/policy/modules/system/selinuxutil.te +++ b/refpolicy/policy/modules/system/selinuxutil.te @@ -321,6 +321,10 @@ libraries_read_shared_libraries(restorecon_t) logging_send_system_log_message(restorecon_t) +optional_policy(`hotplug.te',` +hotplug_use_file_descriptors(restorecon_t) +') + # relabeling rules files_read_all_directories(restorecon_t) kernel_relabel_unlabeled_object(restorecon_t)