Icecast seems to need to read /dev/rand and /dev/urand

diff --git a/policy/modules/services/icecast.te b/policy/modules/services/icecast.te
index f4dc09236918876366537e48292da25828a21ef4..17ed70561a98008d48a3781f7da48e82cda5e4cb 100644 (file)
--- a/policy/modules/services/icecast.te
+++ b/policy/modules/services/icecast.te
@@ -48,6 +48,8 @@ files_pid_filetrans(icecast_t, icecast_var_run_t, { file dir })
 kernel_read_system_state(icecast_t)
 
 dev_read_sysfs(icecast_t)
+dev_read_urand(icecast_t)
+dev_read_rand(icecast_t)
 
 corenet_tcp_bind_soundd_port(icecast_t)
 corenet_tcp_connect_soundd_port(icecast_t)