systemd-login needs fowner

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 4f365084cc8de2b0c1f46b9cfc334111f1bf4f7b..155a8392a20ef0560e5f26c816e92454578ef059 100644 (file)
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -65,7 +65,7 @@ dev_associate(systemd_device_t)
 #
 
 # dac_override is for /run/user/$USER ($USER ownership is $USER:$USER)
-allow systemd_logind_t self:capability { chown dac_override };
+allow systemd_logind_t self:capability { chown dac_override fowner };
 allow systemd_logind_t self:process getcap;
 allow systemd_logind_t self:netlink_kobject_uevent_socket create_socket_perms;
 allow systemd_logind_t self:unix_dgram_socket create_socket_perms;