Blob Blame History Raw
diff --git a/glusterd.te b/glusterd.te
index 382d67a996..322a4fe005 100644
--- a/glusterd.te
+++ b/glusterd.te
@@ -331,3 +331,16 @@ optional_policy(`
 optional_policy(`
 	ssh_exec(glusterd_t)
 ')
+
+
+########################################
+#
+# Local policy for ssh_keygen
+#
+
+gen_require(`
+    type ssh_keygen_t;
+')
+
+manage_dirs_pattern(ssh_keygen_t, glusterd_var_lib_t, glusterd_var_lib_t)
+manage_files_pattern(ssh_keygen_t, glusterd_var_lib_t, glusterd_var_lib_t)
diff --git a/ldap.te b/ldap.te
index 1c922b3402..9079ab40eb 100644
--- a/ldap.te
+++ b/ldap.te
@@ -57,8 +57,8 @@ allow slapd_t self:process { setsched signal } ;
 allow slapd_t self:fifo_file rw_fifo_file_perms;
 allow slapd_t self:tcp_socket { accept listen };
 
-allow slapd_t slapd_cert_t:dir list_dir_perms;
-read_files_pattern(slapd_t, slapd_cert_t, slapd_cert_t)
+manage_dirs_pattern(slapd_t, slapd_cert_t, slapd_cert_t)
+manage_files_pattern(slapd_t, slapd_cert_t, slapd_cert_t)
 read_lnk_files_pattern(slapd_t, slapd_cert_t, slapd_cert_t)
 
 manage_dirs_pattern(slapd_t, slapd_db_t, slapd_db_t)