allow sftpd daemons to read locale file

diff --git a/policy/modules/services/ftp.te b/policy/modules/services/ftp.te
index 0e56a5d57409661228d676678abbb7ac079d1a7d..4986fb9f8abe80ec46f30a396874e5f6c3337ebb 100644 (file)
--- a/policy/modules/services/ftp.te
+++ b/policy/modules/services/ftp.te
@@ -141,6 +141,7 @@ ifdef(`enable_mls',`
 
 files_read_etc_files(anon_sftpd_t)
 
+miscfiles_read_localization(anon_sftpd_t)
 miscfiles_read_public_files(anon_sftpd_t)
 
 tunable_policy(`sftpd_anon_write',`
@@ -411,6 +412,8 @@ userdom_use_inherited_user_terminals(ftpdctl_t)
 
 files_read_etc_files(sftpd_t)
 
+miscfiles_read_localization(sftpd_t)
+
 # allow read access to /home by default
 userdom_read_user_home_content_files(sftpd_t)
 userdom_read_user_home_content_symlinks(sftpd_t)