For some reason chfn tries to stat all devices, dontaudit this

diff --git a/policy/modules/admin/usermanage.te b/policy/modules/admin/usermanage.te
index 3d2f4184a6ad6f3ee17aed1ed5dfd50c3988d0df..0df5af0e9014c4fa1fcf64a9b24a71d5720591c7 100644 (file)
--- a/policy/modules/admin/usermanage.te
+++ b/policy/modules/admin/usermanage.te
@@ -87,6 +87,7 @@ fs_search_auto_mountpoints(chfn_t)
 
 # for SSP
 dev_read_urand(chfn_t)
+dev_dontaudit_getattr_all(chfn_t)
 
 auth_use_pam(chfn_t)