Allow gnomeclock to read cgroup

diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index 946e0b76f920696f4c63d01d6784ced64de572a0..331961c476c617d4b8569c6c2858d52ab3798c6a 100644 (file)
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -206,7 +206,7 @@ term_filetrans_all_named_dev(unconfined_domain_type)
 
 authlogin_filetrans_named_content(unconfined_domain_type)
 
-lib_filetrans_named_content(unconfined_domain_type)
+libs_filetrans_named_content(unconfined_domain_type)
 
 miscfiles_filetrans_named_content(unconfined_domain_type)
 

diff --git a/policy/modules/system/libraries.if b/policy/modules/system/libraries.if
index 8f5a24303ba8ca91098e3489ac8c59b8b6ba1afe..eb621fd1bb260aa7feb0c750bd8d25e84403176c 100644 (file)
--- a/policy/modules/system/libraries.if
+++ b/policy/modules/system/libraries.if
@@ -544,7 +544,7 @@ interface(`files_lib_filetrans_shared_lib',`
 ##     </summary>
 ## </param>
 #
-interface(`lib_filetrans_named_content',`
+interface(`libs_filetrans_named_content',`
        gen_require(`
                type ld_so_cache_t;
        ')

diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index 79c358c46f12bd967bf1772936f59b196fbf32a7..55713508a40353c7e986e0a2615446a990f0657b 100644 (file)
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -46,6 +46,7 @@ interface(`systemd_exec_systemctl',`
        can_exec($1, systemd_systemctl_exec_t)
 
        fs_list_cgroup_dirs($1)
+       fs_read_cgroup_files($1)
        systemd_list_unit_dirs($1)
        init_list_pid_dirs($1)
        init_read_state($1)