diff --git a/policy/modules/system/miscfiles.if b/policy/modules/system/miscfiles.if index e4918b471..edf1f5a09 100644 --- a/policy/modules/system/miscfiles.if +++ b/policy/modules/system/miscfiles.if @@ -556,6 +556,24 @@ interface(`miscfiles_read_man_cache',` allow $1 man_cache_t:lnk_file read_lnk_file_perms; ') +######################################## +## +## Map man cache content. +## +## +## +## Domain allowed access. +## +## +# +interface(`miscfiles_map_man_cache',` + gen_require(` + type man_cache_t; + ') + + allow $1 man_cache_t:file map; +') + ######################################## ## ## Create, read, write, and delete diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if index 78e821eb2..79d106ce1 100644 --- a/policy/modules/system/userdomain.if +++ b/policy/modules/system/userdomain.if @@ -859,6 +859,8 @@ template(`userdom_login_user_template', ` logging_dontaudit_getattr_all_logs($1_t) miscfiles_read_man_pages($1_t) + # map is needed for man-dbs apropos program + miscfiles_map_man_cache($1_t) # for running TeX programs miscfiles_read_tetex_data($1_t) miscfiles_exec_tetex_data($1_t)