diff --git a/unconfined.te b/unconfined.te index f3c88a093944084a40e28be61a580164aa3cf516..ac2c3167ae2fdd9b8c6687973d97544500f52e27 100644 --- a/unconfined.te +++ b/unconfined.te @@ -58,6 +58,7 @@ allow unconfineddomain { -exec_type -security_file -shell_data_file + -app_data_file }:{ dir lnk_file sock_file fifo_file } ~relabelto; allow unconfineddomain exec_type:dir r_dir_perms; allow unconfineddomain exec_type:file { r_file_perms execute execmod }; @@ -81,6 +82,7 @@ allow unconfineddomain { -exec_type -security_file -shell_data_file + -app_data_file }:{ chr_file file } ~{entrypoint execute_no_trans execmod execute relabelto}; allow unconfineddomain rootfs:file execute; allow unconfineddomain contextmount_type:dir r_dir_perms;