Allow passwd_t domain mamange sssd public nad lib files, read pid fil…

…es and send signals to sssd_t domains
filbranden · Dec 10, 2018 · ed03094 · ed03094
1 parent 509e071
commit ed03094
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/policy/modules/admin/usermanage.te b/policy/modules/admin/usermanage.te
@@ -416,6 +416,13 @@ optional_policy(`
 	nscd_run(passwd_t, passwd_roles)
 ')
 
+optional_policy(`
+    sssd_manage_lib_files(passwd_t)
+    sssd_manage_public_files(passwd_t)
+    sssd_read_pid_files(passwd_t)
+    sssd_signal(passwd_t)
+')
+
 ########################################
 #
 # Password admin local policy