Add label for /var/run/nm-dns-dnsmasq\.conf

diff --git a/policy/modules/services/networkmanager.fc b/policy/modules/services/networkmanager.fc
index 47e1b41c8346042ca625caabd881d22037fbbbca..8e8f911b75f8cf4beb857bb7dd8b7dfa470e6177 100644 (file)
--- a/policy/modules/services/networkmanager.fc
+++ b/policy/modules/services/networkmanager.fc
@@ -32,5 +32,6 @@
 /var/run/NetworkManager\.pid   --      gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
 /var/run/NetworkManager(/.*)?          gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
 /var/run/nm-dhclient.*                 gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
+/var/run/nm-dns-dnsmasq\.conf  --      gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
 /var/run/wpa_supplicant(/.*)?          gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
 /var/run/wpa_supplicant-global -s      gen_context(system_u:object_r:NetworkManager_var_run_t,s0)

diff --git a/policy/modules/services/policykit.te b/policy/modules/services/policykit.te
index 9cdbfa80b07395a027d067fdabeb7b71e6472a98..92612d0cddcefc2c59eb1a9f4aff56537ec76224 100644 (file)
--- a/policy/modules/services/policykit.te
+++ b/policy/modules/services/policykit.te
@@ -49,6 +49,8 @@ policykit_domtrans_auth(policykit_t)
 can_exec(policykit_t, policykit_exec_t)
 corecmd_exec_bin(policykit_t)
 
+dev_read_sysfs(policykit_t)
+
 rw_files_pattern(policykit_t, policykit_reload_t, policykit_reload_t)
 
 policykit_domtrans_resolve(policykit_t)