init needs to be able to create private tmp dirs for services

diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index 7752aa102daae55e8170f2f176d9eb30bb231c7d..49a7fbd3b350c91acd52ac8fc9957c734de75972 100644 (file)
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -297,6 +297,7 @@ tunable_policy(`init_systemd',`
        files_mounton_all_mountpoints(init_t)
        files_unmount_all_file_type_fs(init_t)
        files_manage_all_pid_dirs(init_t)
+       files_manage_generic_tmp_dirs(init_t)
        files_relabel_all_pid_dirs(init_t)
        files_relabel_all_pid_files(init_t)
        files_create_all_pid_sockets(init_t)