From c4113a9a84fa271c194558117d5f9cd5988e8014 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Fri, 2 Dec 2011 14:23:26 -0500
Subject: [PATCH] Allow namespace_init_t to relabelfrom and to any MCS label

---
 policy/modules/apps/namespace.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/apps/namespace.te b/policy/modules/apps/namespace.te
index a337d62f..5ddf179b 100644
--- a/policy/modules/apps/namespace.te
+++ b/policy/modules/apps/namespace.te
@@ -29,6 +29,8 @@ domain_use_interactive_fds(namespace_init_t)
 files_read_etc_files(namespace_init_t)
 files_polyinstantiate_all(namespace_init_t)
 
+mcs_file_write_all(namespace_init_t)
+
 auth_use_nsswitch(namespace_init_t)
 
 miscfiles_read_localization(namespace_init_t)
-- 
2.47.3