diff --git a/policy/modules/services/afs.fc b/policy/modules/services/afs.fc index 15a4a62..eaea138 100644 --- a/policy/modules/services/afs.fc +++ b/policy/modules/services/afs.fc @@ -22,6 +22,7 @@ /usr/sbin/afsd -- gen_context(system_u:object_r:afs_exec_t,s0) +/usr/vice/cache(/.*)? gen_context(system_u:object_r:afs_cache_t,s0) /usr/vice/etc/afsd -- gen_context(system_u:object_r:afs_exec_t,s0) /var/cache/afs(/.*)? gen_context(system_u:object_r:afs_cache_t,s0) diff --git a/policy/modules/services/afs.te b/policy/modules/services/afs.te index 4ce2d36..966cbf3 100644 --- a/policy/modules/services/afs.te +++ b/policy/modules/services/afs.te @@ -1,5 +1,5 @@ -policy_module(afs, 1.5.0) +policy_module(afs, 1.5.1) ######################################## # @@ -83,6 +83,7 @@ files_var_filetrans(afs_t, afs_cache_t, { file dir }) files_mounton_mnt(afs_t) files_read_etc_files(afs_t) +files_read_usr_files(afs_t) files_rw_etc_runtime_files(afs_t) fs_getattr_xattr_fs(afs_t)