From 05709538a6bba1db8544dd4cb7457f74db960d95 Mon Sep 17 00:00:00 2001 From: Laurent Bigonville Date: Wed, 3 Feb 2016 14:14:38 +0100 Subject: [PATCH] Allow logind to read efivarfs files --- policy/modules/system/systemd.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 88924473f..5565fd36b 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -191,6 +191,8 @@ dev_setattr_sound_dev(systemd_logind_t) files_read_etc_files(systemd_logind_t) +fs_read_efivarfs_files(systemd_logind_t) + fs_getattr_tmpfs(systemd_logind_t) storage_getattr_removable_dev(systemd_logind_t)