Additional change from Guido Trentalancia related to evolution.

policy/modules/contrib

@@ -1 +1 @@
-Subproject commit 1675bac7da53f02d911c7eff3ca1cfaaa9efbfb1
+Subproject commit a97e0ce7c0e8bb354bbd3ae889f1e3e1f8ab52aa

policy/modules/system/userdomain.if

@@ -2375,6 +2375,28 @@ interface(`userdom_read_user_certs',`
 	files_search_home($1)
 ')
 
+########################################
+## <summary>
+##	Do not audit attempts to manage
+##	the user SSL certificates.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <rolecap/>
+#
+interface(`userdom_dontaudit_manage_user_certs',`
+	gen_require(`
+		type user_cert_t;
+	')
+
+	dontaudit $1 user_cert_t:dir manage_dir_perms;
+	dontaudit $1 user_cert_t:file manage_file_perms;
+	dontaudit $1 user_cert_t:lnk_file manage_file_perms;
+')
+
 ########################################
 ## <summary>
 ##	Manage user SSL certificates.

policy/modules/system/userdomain.te

@@ -1,4 +1,4 @@
-policy_module(userdomain, 4.11.6)
+policy_module(userdomain, 4.11.7)
 
 ########################################
 #