diff --git a/policy/modules/admin/portage.if b/policy/modules/admin/portage.if index 08b361bfd..a1bfbaa51 100644 --- a/policy/modules/admin/portage.if +++ b/policy/modules/admin/portage.if @@ -293,3 +293,22 @@ interface(`portage_dontaudit_rw_tmp_files',` dontaudit $1 portage_tmp_t:file rw_file_perms; ') + +######################################## +## +## Do not audit attempts to use +## portage file descriptors. +## +## +## +## Domain to not audit. +## +## +# +interface(`portage_dontaudit_use_fds',` + gen_require(` + type portage_t; + ') + + dontaudit $1 portage_t:fds use; +')