diff --git a/policy/modules/services/rgmanager.if b/policy/modules/services/rgmanager.if index 91dbe71..aaf7c85 100644 --- a/policy/modules/services/rgmanager.if +++ b/policy/modules/services/rgmanager.if @@ -118,7 +118,7 @@ interface(`rgmanager_admin',` ') allow $1 rgmanager_t:process { ptrace signal_perms }; - read_files_pattern($1, rgmanager_t, rgmanager_t) + ps_process_pattern($1, rgmanager_t) init_labeled_script_domtrans($1, rgmanager_initrc_exec_t) domain_system_change_exemption($1) diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if index 59bc26b..5b277ea 100644 --- a/policy/modules/system/udev.if +++ b/policy/modules/system/udev.if @@ -89,8 +89,7 @@ interface(`udev_read_state',` ') kernel_search_proc($1) - allow $1 udev_t:file read_file_perms; - allow $1 udev_t:lnk_file read_lnk_file_perms; + ps_process_pattern($1, udev_t) ') ########################################