Allow seunshare to unmount file systems

diff --git a/policy/modules/apps/seunshare.te b/policy/modules/apps/seunshare.te
index 7e6f53c77b0bd2fae6e66d4566da40361f0722f1..ecc6793021d81be6d2f0fc6a0293df7ad0c7de28 100644 (file)
--- a/policy/modules/apps/seunshare.te
+++ b/policy/modules/apps/seunshare.te
@@ -33,6 +33,7 @@ files_relabelfrom_tmp_dirs(seunshare_domain)
 
 fs_manage_cgroup_dirs(seunshare_domain)
 fs_manage_cgroup_files(seunshare_domain)
+fs_unmount_all_fs(seunshare_domain)
 
 logging_send_syslog_msg(seunshare_domain)