Make ssh-keygen working with fips_enabled

diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index be7b7a39041273fb237cda351f55d1ac09ce025f..24f8d902c6ad112d9c1575b39b00c7e881059b9b 100644 (file)
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -384,6 +384,7 @@ manage_files_pattern(ssh_keygen_t, ssh_home_t, ssh_home_t)
 userdom_admin_home_dir_filetrans(ssh_keygen_t, ssh_home_t, dir)
 userdom_user_home_dir_filetrans(ssh_keygen_t, ssh_home_t, dir)
 
+kernel_read_system_state(ssh_keygen_t)
 kernel_read_kernel_sysctls(ssh_keygen_t)
 
 fs_search_auto_mountpoints(ssh_keygen_t)