f1bc73d0ef
Fixes for thumb policy by grift Add new nfsd ports Added fix to allow confined apps to execmod on chrome Add labeling for additional vdsm directories Allow Exim and Dovecot SASL Add label for /var/run/nmbd Add fixes to make virsh and xen working together Colord executes ls /var/spool/cron is now labeled as user_cron_spool_t
17 lines
579 B
Diff
17 lines
579 B
Diff
diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
|
|
index 1105ff5..620e17b 100644
|
|
--- a/policy/modules/roles/unconfineduser.te
|
|
+++ b/policy/modules/roles/unconfineduser.te
|
|
@@ -188,6 +188,11 @@ optional_policy(`
|
|
rtkit_scheduled(unconfined_usertype)
|
|
')
|
|
|
|
+ # Might remove later if this proves to be problematic, but would like to gather AVCs
|
|
+ optional_policy(`
|
|
+ thumb_role(unconfined_r, unconfined_usertype)
|
|
+ ')
|
|
+
|
|
optional_policy(`
|
|
setroubleshoot_dbus_chat(unconfined_usertype)
|
|
setroubleshoot_dbus_chat_fixit(unconfined_t)
|