From: Dan Walsh <dwalsh@redhat.com>
Date: Mon, 5 Dec 2011 21:02:06 +0000 (-0500)
Subject: Allow user_mail_t to read /dev/random
X-Git-Tag: 000~40
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0fc816ac91fdd253817629f39dd655c67acf88ee;p=people%2Fstevee%2Fselinux-policy.git

Allow user_mail_t to read /dev/random
---

diff --git a/policy/modules/services/mta.te b/policy/modules/services/mta.te
index 7f55b853..a7d94de9 100644
--- a/policy/modules/services/mta.te
+++ b/policy/modules/services/mta.te
@@ -328,6 +328,8 @@ kernel_read_system_state(user_mail_domain)
 kernel_read_network_state(user_mail_domain)
 kernel_request_load_module(user_mail_domain)
 
+dev_read_urand(user_mail_domain)
+
 files_read_usr_files(user_mail_domain)
 
 optional_policy(`