diff --git a/domain.te b/domain.te index 2e9720e14d9750ee8ec75b2f541791673d47df2d..9a59c49a54cd2c21423ec615ea1af1435b6e7824 100644 --- a/domain.te +++ b/domain.te @@ -80,7 +80,7 @@ allow domain cache_file:file { getattr read }; allow domain cache_file:lnk_file read; # For /acct/uid/*/tasks. -allow domain cgroup:dir search; +allow domain cgroup:dir { search write }; allow domain cgroup:file w_file_perms; # For /sys/qemu_trace files in the emulator.