Allow user_mail_t to read /dev/random

diff --git a/policy/modules/services/mta.te b/policy/modules/services/mta.te
index 7f55b853d5f22a6143f8b8e39d1b38a20ad27915..a7d94de96cf95232f5acfe7cfef36fbaa5a5dacf 100644 (file)
--- a/policy/modules/services/mta.te
+++ b/policy/modules/services/mta.te
@@ -328,6 +328,8 @@ kernel_read_system_state(user_mail_domain)
 kernel_read_network_state(user_mail_domain)
 kernel_request_load_module(user_mail_domain)
 
+dev_read_urand(user_mail_domain)
+
 files_read_usr_files(user_mail_domain)
 
 optional_policy(`