diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 8b13d65fe..02ead5b2a 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -1216,8 +1216,10 @@ template(`userdom_unpriv_user_template', ` ') # Allow controlling usbguard - tunable_policy(`usbguard_user_modify_rule_files',` - usbguard_stream_connect($1_t) + optional_policy(` + tunable_policy(`usbguard_user_modify_rule_files',` + usbguard_stream_connect($1_t) + ') ') ')