Consolekit needs to read the environ field of logged in users

diff --git a/policy/modules/services/consolekit.te b/policy/modules/services/consolekit.te
index 192332a557893e3317d292be2ab6c64703910cc8..5eaa496af044ad4ae900a6e4e42244593fd9fd45 100644 (file)
--- a/policy/modules/services/consolekit.te
+++ b/policy/modules/services/consolekit.te
@@ -75,6 +75,7 @@ miscfiles_read_localization(consolekit_t)
 systemd_exec_systemctl(consolekit_t)
 
 # consolekit needs to be able to ptrace all logged in users 
+userdom_read_all_users_state(consolekit_t)
 userdom_ptrace_all_users(consolekit_t)
 userdom_dontaudit_read_user_home_content_files(consolekit_t)
 userdom_dontaudit_getattr_admin_home_files(consolekit_t)