diff --git a/policy/modules/services/rpcbind.if b/policy/modules/services/rpcbind.if index bd3c6b8..5a4d69d 100644 --- a/policy/modules/services/rpcbind.if +++ b/policy/modules/services/rpcbind.if @@ -144,4 +144,10 @@ interface(`rpcbind_admin',` domain_system_change_exemption($1) role_transition $2 rpcbind_initrc_exec_t system_r; allow $2 system_r; + + files_search_var_lib($1) + admin_pattern($1, rpcbind_var_lib_t) + + files_search_pids($1) + admin_pattern($1, rpcbind_var_run_t) ')