Allow asterisk to read /dev/random if it uses TLS

diff --git a/policy/modules/services/asterisk.te b/policy/modules/services/asterisk.te
index 19716e72c8caacd9ce696e67bac844d94fadf696..0e8a352da1b9c6d07e251cb328f9da1df9a62f3c 100644 (file)
--- a/policy/modules/services/asterisk.te
+++ b/policy/modules/services/asterisk.te
@@ -120,6 +120,7 @@ dev_rw_generic_usb_dev(asterisk_t)
 dev_read_sysfs(asterisk_t)
 dev_read_sound(asterisk_t)
 dev_write_sound(asterisk_t)
+dev_read_rand(asterisk_t)
 dev_read_urand(asterisk_t)
 
 domain_use_interactive_fds(asterisk_t)