diff --git a/policy/modules/system/setrans.te b/policy/modules/system/setrans.te index aa92446..2ddabe1 100644 --- a/policy/modules/system/setrans.te +++ b/policy/modules/system/setrans.te @@ -1,5 +1,9 @@ -policy_module(setrans, 1.5.0) +policy_module(setrans, 1.5.1) + +gen_require(` + class context contains; +') ######################################## # @@ -35,6 +39,7 @@ allow setrans_t self:process { setrlimit getcap setcap signal_perms }; allow setrans_t self:unix_stream_socket create_stream_socket_perms; allow setrans_t self:unix_dgram_socket create_socket_perms; allow setrans_t self:netlink_selinux_socket create_socket_perms; +allow setrans_t self:context contains; can_exec(setrans_t, setrans_exec_t) corecmd_search_bin(setrans_t)