Allow setroubleshoot_fixit_t to read random_device_t

5umm3r15 · wrabcak · commit 89235da6dbd4 · 2019-10-08T14:06:29.000+02:00
Allow setroubleshoot_fixit_t to to read from random number generator devices Fixed Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1622115
diff --git a/setroubleshoot.te b/setroubleshoot.te
@@ -217,6 +217,7 @@ corecmd_exec_bin(setroubleshoot_fixit_t)
 corecmd_exec_shell(setroubleshoot_fixit_t)
 corecmd_getattr_all_executables(setroubleshoot_fixit_t)
 
+dev_read_rand(setroubleshoot_fixit_t)
 dev_read_sysfs(setroubleshoot_fixit_t)
 dev_read_urand(setroubleshoot_fixit_t)
 
