Allow certmonger_t domain to read pkcs_slotd lock files

wrabcak · wrabcak · commit f7a21a9f173e · 2020-02-20T15:20:04.000+01:00
diff --git a/certmonger.te b/certmonger.te
@@ -169,6 +169,10 @@ optional_policy(`
     pki_tomcat_systemctl(certmonger_t)
 ')
 
+optional_policy(`
+    pkcs_read_lock(certmonger_t)
+')
+
 optional_policy(`
     rhcs_start_haproxy_services(certmonger_t)
 ')
