diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te index cf06c86..b444765 100644 --- a/refpolicy/policy/modules/kernel/kernel.te +++ b/refpolicy/policy/modules/kernel/kernel.te @@ -221,6 +221,14 @@ ifdef(`targeted_policy',` unconfined_domain_template(kernel_t) ') +tunable_policy(`read_default_t',` + files_list_default(kernel_t) + files_read_default_files(kernel_t) + files_read_default_symlinks(kernel_t) + files_read_default_sockets(kernel_t) + files_read_default_pipes(kernel_t) +') + optional_policy(`nis.te',` nis_use_ypbind(kernel_t) ')