diff --git a/policy/modules/system/unconfined.if b/policy/modules/system/unconfined.if index 5ca20a97d..2b85a6e2a 100644 --- a/policy/modules/system/unconfined.if +++ b/policy/modules/system/unconfined.if @@ -20,6 +20,7 @@ interface(`unconfined_domain_noaudit',` # Use most Linux capabilities allow $1 self:capability ~sys_module; + allow $1 self:capability2 syslog; allow $1 self:fifo_file manage_fifo_file_perms; # Transition to myself, to make get_ordered_context_list happy.