diff --git a/policy/modules/services/samba.if b/policy/modules/services/samba.if index 20a1f78..93b58ea 100644 --- a/policy/modules/services/samba.if +++ b/policy/modules/services/samba.if @@ -776,7 +776,7 @@ interface(`samba_admin',` ps_process_pattern($1, nmbd_t) allow $1 samba_unconfined_script_t:process { ptrace signal_perms }; - read_files_pattern($1, samba_unconfined_script_t, samba_unconfined_script_t) + ps_process_pattern($1, samba_unconfined_script_t) samba_run_smbcontrol($1, $2, $3) samba_run_winbind_helper($1, $2, $3) diff --git a/policy/modules/services/sendmail.if b/policy/modules/services/sendmail.if index b0c2f3b..cf9fdcd 100644 --- a/policy/modules/services/sendmail.if +++ b/policy/modules/services/sendmail.if @@ -335,10 +335,10 @@ interface(`sendmail_admin',` ') allow $1 sendmail_t:process { ptrace signal_perms }; - read_files_pattern($1, sendmail_t, sendmail_t) + ps_process_pattern($1, sendmail_t) allow $1 unconfined_sendmail_t:process { ptrace signal_perms }; - read_files_pattern($1, unconfined_sendmail_t, unconfined_sendmail_t) + ps_process_pattern($1, unconfined_sendmail_t) sendmail_initrc_domtrans($1) domain_system_change_exemption($1) diff --git a/policy/modules/services/sssd.if b/policy/modules/services/sssd.if index 7e44f26..39cc338 100644 --- a/policy/modules/services/sssd.if +++ b/policy/modules/services/sssd.if @@ -234,7 +234,7 @@ interface(`sssd_admin',` ') allow $1 sssd_t:process { ptrace signal_perms }; - read_files_pattern($1, sssd_t, sssd_t) + ps_process_pattern($1, sssd_t) # Allow sssd_t to restart the apache service sssd_initrc_domtrans($1)