Allow namespace_init_t to relabelfrom and to any MCS label

diff --git a/policy/modules/apps/namespace.te b/policy/modules/apps/namespace.te
index a337d62fe46114ddf41f96549e999af010c4a368..5ddf179bb80c56d62bd08cf577e88eb44a554fbf 100644 (file)
--- a/policy/modules/apps/namespace.te
+++ b/policy/modules/apps/namespace.te
@@ -29,6 +29,8 @@ domain_use_interactive_fds(namespace_init_t)
 files_read_etc_files(namespace_init_t)
 files_polyinstantiate_all(namespace_init_t)
 
+mcs_file_write_all(namespace_init_t)
+
 auth_use_nsswitch(namespace_init_t)
 
 miscfiles_read_localization(namespace_init_t)