Allow colord to read ini files which are labeled as bin_t

diff --git a/policy/modules/services/colord.te b/policy/modules/services/colord.te
index a58903f2eb363199623b908a51b7d1729e6a7c95..9082c7ec73957232a0054aaead66e8a0939b599f 100644 (file)
--- a/policy/modules/services/colord.te
+++ b/policy/modules/services/colord.te
@@ -45,6 +45,9 @@ kernel_read_system_state(colord_t)
 kernel_read_device_sysctls(colord_t)
 kernel_request_load_module(colord_t)
 
+#reads *.ini files
+corecmd_read_bin_files(colord_t)
+
 corenet_all_recvfrom_unlabeled(colord_t)
 corenet_all_recvfrom_netlabel(colord_t)
 corenet_udp_bind_generic_node(colord_t)