diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch index 9b13a22..fe538c6 100644 --- a/policy-rawhide-contrib.patch +++ b/policy-rawhide-contrib.patch @@ -44363,7 +44363,7 @@ index 0d3c270..709dda1 100644 + ') ') diff --git a/numad.te b/numad.te -index f5d145d..a4fed11 100644 +index f5d145d..97e1148 100644 --- a/numad.te +++ b/numad.te @@ -1,4 +1,4 @@ @@ -44401,7 +44401,7 @@ index f5d145d..a4fed11 100644 allow numad_t self:fifo_file rw_fifo_file_perms; -allow numad_t self:msg { send receive }; allow numad_t self:msgq create_msgq_perms; -+allow numad_t self:msg create_msg_perms; ++allow numad_t self:msg { send receive }; allow numad_t self:unix_stream_socket create_stream_socket_perms; -allow numad_t numad_log_t:file { append_file_perms create_file_perms setattr_file_perms }; @@ -44419,11 +44419,11 @@ index f5d145d..a4fed11 100644 +domain_use_interactive_fds(numad_t) +domain_read_all_domains_state(numad_t) +domain_setpriority_all_domains(numad_t) - --miscfiles_read_localization(numad_t) ++ +fs_manage_cgroup_dirs(numad_t) +fs_rw_cgroup_files(numad_t) -+ + +-miscfiles_read_localization(numad_t) +tunable_policy(`deny_ptrace',`',` + virt_ptrace(numad_t) +')