Allow mount to read /dev/urandom

diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te
index b90b72644e9e2e4e90884a0a70772729a48629a3..a50ceba163a5b6466be537a45bb79a228c47eb4c 100644 (file)
--- a/policy/modules/system/mount.te
+++ b/policy/modules/system/mount.te
@@ -97,6 +97,7 @@ dev_getattr_all_blk_files(mount_t)
 dev_list_all_dev_nodes(mount_t)
 dev_read_usbfs(mount_t)
 dev_read_rand(mount_t)
+dev_read_urand(mount_t)
 dev_read_sysfs(mount_t)
 dev_dontaudit_write_sysfs_dirs(mount_t)
 dev_rw_lvm_control(mount_t)