diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 89718a703..c02db073b 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -530,8 +530,8 @@ template(`userdom_common_user_template',` files_exec_etc_files($1_t) files_search_locks($1_t) - # Check to see if cdrom is mounted - files_search_mnt($1_t) + # List mounted filesystems (cdrom, FAT, NTFS and so on) + files_list_mnt($1_t) # cjp: perhaps should cut back on file reads: files_read_var_files($1_t) files_read_var_symlinks($1_t)