diff --git a/policy/modules/system/clock.te b/policy/modules/system/clock.te index e935c7c..8019c58 100644 --- a/policy/modules/system/clock.te +++ b/policy/modules/system/clock.te @@ -38,6 +38,10 @@ corecmd_exec_shell(hwclock_t) dev_read_sysfs(hwclock_t) dev_rw_realtime_clock(hwclock_t) +files_read_etc_files(hwclock_t) +# for when /usr is not mounted: +files_dontaudit_search_isid_type_dirs(hwclock_t) + fs_getattr_xattr_fs(hwclock_t) fs_search_auto_mountpoints(hwclock_t) @@ -51,10 +55,6 @@ domain_use_interactive_fds(hwclock_t) init_use_fds(hwclock_t) init_use_script_ptys(hwclock_t) -files_read_etc_files(hwclock_t) -# for when /usr is not mounted: -files_dontaudit_search_isid_type_dirs(hwclock_t) - logging_send_audit_msgs(hwclock_t) logging_send_syslog_msg(hwclock_t)