From a25a1a3056903f585dd1f385a1b94a6c751539b5 Mon Sep 17 00:00:00 2001
From: Corentin LABBE <clabbe.montjoie@gmail.com>
Date: Wed, 4 Jan 2023 17:00:37 +0100
Subject: [PATCH] smartmon: allow smartd to read fsadm_db_t files

On gentoo, smartd need to access fsadm_db_t files.

Signed-off-by: Corentin LABBE <clabbe.montjoie@gmail.com>
---
 policy/modules/services/smartmon.te |  3 +++
 policy/modules/system/fstools.if    | 18 ++++++++++++++++++
 2 files changed, 21 insertions(+)

diff --git a/policy/modules/services/smartmon.te b/policy/modules/services/smartmon.te
index b5c1a40b1..82bfa992d 100644
--- a/policy/modules/services/smartmon.te
+++ b/policy/modules/services/smartmon.te
@@ -120,3 +120,6 @@ optional_policy(`
 	seutil_sigchld_newrole(fsdaemon_t)
 ')
 
+optional_policy(`
+	fstools_read_fsadm_db_files(fsdaemon_t)
+')
diff --git a/policy/modules/system/fstools.if b/policy/modules/system/fstools.if
index f994965af..d82b4b282 100644
--- a/policy/modules/system/fstools.if
+++ b/policy/modules/system/fstools.if
@@ -264,3 +264,21 @@ interface(`fstools_manage_swap_files',`
 
 	allow $1 swapfile_t:file manage_file_perms;
 ')
+
+########################################
+## <summary>
+##	Read fsadm_db_t files.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`fstools_read_fsadm_db_files',`
+	gen_require(`
+		type fsadm_db_t;
+	')
+
+	read_files_pattern($1, fsadm_db_t, fsadm_db_t)
+')