Allow colord to execute ifconfig

diff --git a/policy/modules/services/colord.te b/policy/modules/services/colord.te
index 74f1baaeaa8b5f872cabfc36657b0bca43bde418..e7c70b526fd3503f93926af6e5dc06de6fe11d72 100644 (file)
--- a/policy/modules/services/colord.te
+++ b/policy/modules/services/colord.te
@@ -87,8 +87,6 @@ logging_send_syslog_msg(colord_t)
 
 miscfiles_read_localization(colord_t)
 
-sysnet_dns_name_resolve(colord_t)
-
 userdom_rw_user_tmpfs_files(colord_t)
 
 userdom_home_reader(colord_t)
@@ -111,6 +109,11 @@ optional_policy(`
        policykit_read_reload(colord_t)
 ')
 
+optional_policy(`
+       sysnet_exec_ifconfig(colord_t)
+       sysnet_dns_name_resolve(colord_t)
+')
+
 optional_policy(`
        udev_read_db(colord_t)
 ')