Noticed on my RHEL6 box that rhsmcertd needed these access

diff --git a/policy/modules/services/rhsmcertd.te b/policy/modules/services/rhsmcertd.te
index 4d1d0c7ae3c5ffdda2d36cca84e39ebd163a4252..c0952a321ceb28d01734e3cb528ae6e3cba2e2a6 100644 (file)
--- a/policy/modules/services/rhsmcertd.te
+++ b/policy/modules/services/rhsmcertd.te
@@ -44,14 +44,18 @@ manage_files_pattern(rhsmcertd_t, rhsmcertd_var_lib_t, rhsmcertd_var_lib_t)
 manage_dirs_pattern(rhsmcertd_t, rhsmcertd_var_run_t, rhsmcertd_var_run_t)
 manage_files_pattern(rhsmcertd_t, rhsmcertd_var_run_t, rhsmcertd_var_run_t)
 
+kernel_read_network_state(rhsmcertd_t)
 kernel_read_system_state(rhsmcertd_t)
 
+files_list_tmp(rhsmcertd_t)
+
 corecmd_exec_bin(rhsmcertd_t)
 
 dev_read_urand(rhsmcertd_t)
 
 files_read_etc_files(rhsmcertd_t)
 files_read_usr_files(rhsmcertd_t)
+files_manage_generic_locks(rhsmcertd_t)
 
 miscfiles_read_localization(rhsmcertd_t)
 miscfiles_read_certs(rhsmcertd_t)