From d8226758509bcedc48d10b02bec191266f85bd76 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Jul 14 2006 13:11:42 +0000
Subject: add access to keys for unconfined


---

diff --git a/policy/modules/kernel/domain.te b/policy/modules/kernel/domain.te
index f0e07f2..31550e1 100644
--- a/policy/modules/kernel/domain.te
+++ b/policy/modules/kernel/domain.te
@@ -1,5 +1,5 @@
 
-policy_module(domain,1.1.3)
+policy_module(domain,1.1.4)
 
 ########################################
 #
@@ -141,3 +141,6 @@ allow unconfined_domain_type domain:msg { send receive };
 allow unconfined_domain_type domain:dir r_dir_perms;
 allow unconfined_domain_type domain:file r_file_perms;
 allow unconfined_domain_type domain:lnk_file r_file_perms;
+
+# act on all domains keys
+allow unconfined_domain_type domain:key *;