Allow mailman to read /dev/urandom

diff --git a/policy/modules/services/mailman.te b/policy/modules/services/mailman.te
index cea085e0b8e529707da667f6e3ac03dba5d19c68..0c0925ecd02a7dec06fdbaa8366a50ee097696e6 100644 (file)
--- a/policy/modules/services/mailman.te
+++ b/policy/modules/services/mailman.te
@@ -80,6 +80,8 @@ files_pid_filetrans(mailman_mail_t, mailman_var_run_t, { file dir })
 corenet_tcp_connect_innd_port(mailman_mail_t)
 corenet_tcp_connect_spamd_port(mailman_mail_t)
 
+dev_read_urand(mailman_mail_t)
+
 files_search_spool(mailman_mail_t)
 
 fs_rw_anon_inodefs_files(mailman_mail_t)