Allow fsadm to read all to read files and directories regardless of their MCS categor...

diff --git a/policy/modules/system/fstools.te b/policy/modules/system/fstools.te
index 38390f52ba65e60141da20b26f697db40ebde90c..f85e3cb09725b0ae08b4914bafda3b4842983fca 100644 (file)
--- a/policy/modules/system/fstools.te
+++ b/policy/modules/system/fstools.te
@@ -132,6 +132,8 @@ files_manage_mnt_dirs(fsadm_t)
 # for tune2fs
 files_search_all(fsadm_t)
 
+mcs_file_read_all_levels(fsadm_t)
+
 mls_file_read_all_levels(fsadm_t)
 mls_file_write_all_levels(fsadm_t)