trunk: Enable open permission checks policy capability.

[people/stevee/selinux-policy.git] / policy / modules / services / pcscd.te

diff --git a/policy/modules/services/pcscd.te b/policy/modules/services/pcscd.te
index a90f60306bf8285f5923620c37e76f3580b5d62e..b3e9931b6cde4128d4cc5778b4fd5b6fe8342a15 100644 (file)
--- a/policy/modules/services/pcscd.te
+++ b/policy/modules/services/pcscd.te
@@ -22,7 +22,7 @@ files_pid_file(pcscd_var_run_t)
 
 allow pcscd_t self:capability { dac_override dac_read_search };
 allow pcscd_t self:process signal;
-allow pcscd_t self:fifo_file { read write };
+allow pcscd_t self:fifo_file rw_fifo_file_perms;
 allow pcscd_t self:unix_stream_socket create_stream_socket_perms;
 allow pcscd_t self:unix_dgram_socket create_socket_perms;
 allow pcscd_t self:tcp_socket create_stream_socket_perms;