diff --git a/policy/modules/admin/quota.te b/policy/modules/admin/quota.te index aa6bed829..b3bceaef9 100644 --- a/policy/modules/admin/quota.te +++ b/policy/modules/admin/quota.te @@ -72,6 +72,8 @@ fs_getattr_xattr_fs(quota_t) fs_remount_xattr_fs(quota_t) fs_search_auto_mountpoints(quota_t) +miscfiles_read_localization(quota_t) + mls_file_read_all_levels(quota_t) storage_raw_read_fixed_disk(quota_t) diff --git a/policy/modules/system/getty.te b/policy/modules/system/getty.te index bbc83a807..a900226bf 100644 --- a/policy/modules/system/getty.te +++ b/policy/modules/system/getty.te @@ -34,6 +34,7 @@ files_tmp_file(getty_tmp_t) # Use capabilities. allow getty_t self:capability { chown dac_override fowner fsetid setgid sys_admin sys_resource sys_tty_config }; dontaudit getty_t self:capability sys_tty_config; +allow getty_t self:capability2 checkpoint_restore; allow getty_t self:process { getpgid getsession setpgid signal_perms }; allow getty_t self:fifo_file rw_fifo_file_perms;