diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 1422d8e20..1549d5bb1 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -416,6 +416,9 @@ kernel_read_system_state(systemd_log_parse_env_type) dev_write_kmsg(systemd_log_parse_env_type) +# For /sys/firmware/efi/efivars/SystemdOptions-8cf2644b-4b0b-428f-9387-6d876050dc67 +fs_read_efivarfs_files(systemd_log_parse_env_type) + term_use_console(systemd_log_parse_env_type) init_read_state(systemd_log_parse_env_type)