systemd: allow systemd-pcrphase to read generic certs

Signed-off-by: Kenton Groombridge <me@concord.sh>
2023-03-06 19:17:03 -05:00 · 2023-03-06 19:17:03 -05:00 · 48af8ca656
commit 48af8ca656
parent 20fbb550b7
1 changed files with 2 additions and 0 deletions
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@ -1409,6 +1409,8 @@ init_read_state(systemd_pcrphase_t)

 logging_send_syslog_msg(systemd_pcrphase_t)

+miscfiles_read_generic_certs(systemd_pcrphase_t)
+
 #########################################
 #
 # systemd-pstore local policy