From: Dan Walsh <dwalsh@redhat.com>
Date: Fri, 2 Dec 2011 19:23:26 +0000 (-0500)
Subject: Allow namespace_init_t to relabelfrom and to any MCS label
X-Git-Tag: 000~47
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c4113a9a84fa271c194558117d5f9cd5988e8014;p=people%2Fstevee%2Fselinux-policy.git

Allow namespace_init_t to relabelfrom and to any MCS label
---

diff --git a/policy/modules/apps/namespace.te b/policy/modules/apps/namespace.te
index a337d62f..5ddf179b 100644
--- a/policy/modules/apps/namespace.te
+++ b/policy/modules/apps/namespace.te
@@ -29,6 +29,8 @@ domain_use_interactive_fds(namespace_init_t)
 files_read_etc_files(namespace_init_t)
 files_polyinstantiate_all(namespace_init_t)
 
+mcs_file_write_all(namespace_init_t)
+
 auth_use_nsswitch(namespace_init_t)
 
 miscfiles_read_localization(namespace_init_t)