From 0fc816ac91fdd253817629f39dd655c67acf88ee Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Mon, 5 Dec 2011 16:02:06 -0500
Subject: [PATCH] Allow user_mail_t to read /dev/random

---
 policy/modules/services/mta.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/mta.te b/policy/modules/services/mta.te
index 7f55b853..a7d94de9 100644
--- a/policy/modules/services/mta.te
+++ b/policy/modules/services/mta.te
@@ -328,6 +328,8 @@ kernel_read_system_state(user_mail_domain)
 kernel_read_network_state(user_mail_domain)
 kernel_request_load_module(user_mail_domain)
 
+dev_read_urand(user_mail_domain)
+
 files_read_usr_files(user_mail_domain)
 
 optional_policy(`
-- 
2.47.3