Allow thumb_t to create thumb_tmp_t in user_tmp_t directories

diff --git a/policy/modules/apps/thumb.te b/policy/modules/apps/thumb.te
index 01584ceb8b4e1a224ed39988d75c13b878241659..b23b488e72f9fdae6e36e526ebf9969f86de680c 100644 (file)
--- a/policy/modules/apps/thumb.te
+++ b/policy/modules/apps/thumb.te
@@ -35,6 +35,7 @@ manage_files_pattern(thumb_t, thumb_tmp_t, thumb_tmp_t)
 manage_dirs_pattern(thumb_t, thumb_tmp_t, thumb_tmp_t)
 exec_files_pattern(thumb_t, thumb_tmp_t, thumb_tmp_t)
 files_tmp_filetrans(thumb_t, thumb_tmp_t, { file dir })
+userdom_user_tmp_filetrans(thumb_t, thumb_tmp_t, { file dir })
 
 kernel_read_system_state(thumb_t)