diff --git a/public/runas.te b/public/runas.te index e56a9e76b4649c8ccb4023bae1c84c5175d116ae..54c94c26baa7977b285542394f08b8aaff809857 100644 --- a/public/runas.te +++ b/public/runas.te @@ -25,6 +25,10 @@ selinux_check_context(runas) # validate context allow runas self:process setcurrent; allow runas non_system_app_set:process dyntransition; # setcon +# Grant access to seapp_contexts files +# To be replaced by seapp_contexts_file label from commit 1e149967a +allow runas rootfs:file r_file_perms; + ### ### neverallow rules ###