diff --git a/policy/modules/system/fstools.if b/policy/modules/system/fstools.if index 016a770b9..c4bbd880e 100644 --- a/policy/modules/system/fstools.if +++ b/policy/modules/system/fstools.if @@ -81,6 +81,24 @@ interface(`fstools_signal',` allow $1 fsadm_t:process signal; ') +######################################## +## +## Inherit fstools file descriptors. +## +## +## +## The type of the process performing this action. +## +## +# +interface(`fstools_use_fds',` + gen_require(` + type fsadm_t; + ') + + allow $1 fsadm_t:fd use; +') + ######################################## ## ## Read fstools unnamed pipes.