diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 4906767a8..db98053a2 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -289,7 +289,7 @@ template(`systemd_user_app_status',` ps_process_pattern($1_systemd_t, $2) allow $1_systemd_t $2:process signal_perms; allow $2 $1_systemd_t:fd use; - allow $2 $1_systemd_t:unix_stream_socket rw_socket_perms; + allow $2 $1_systemd_t:unix_stream_socket rw_stream_socket_perms; # apps run by systemd --user instances need to be able to read the # state of the systemd --user instance