trunk: Enable open permission checks policy capability.

[people/stevee/selinux-policy.git] / policy / modules / system / iscsi.te

diff --git a/policy/modules/system/iscsi.te b/policy/modules/system/iscsi.te
index deccf565565e34961a1ffc31500e68bf241e4c8b..c8492b7c27d47d9bb8793a5ead83a7ce6242708e 100644 (file)
--- a/policy/modules/system/iscsi.te
+++ b/policy/modules/system/iscsi.te
@@ -30,7 +30,7 @@ files_pid_file(iscsi_var_run_t)
 
 allow iscsid_t self:capability { dac_override ipc_lock net_admin sys_nice sys_resource };
 allow iscsid_t self:process { setrlimit setsched signal };
-allow iscsid_t self:fifo_file { read write };
+allow iscsid_t self:fifo_file rw_fifo_file_perms;
 allow iscsid_t self:unix_stream_socket { create_stream_socket_perms connectto };
 allow iscsid_t self:unix_dgram_socket create_socket_perms;
 allow iscsid_t self:sem create_sem_perms;