From 55262ef418d0c7b6e6857f3dd7ca8ea6c73334c6 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 22 Oct 2024 21:30:55 +0200
Subject: [PATCH] Allow unconfined_t execute kmod in the kmod domain

Resolves: RHEL-54710
---
 policy/modules/roles/unconfineduser.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/policy/modules/roles/unconfineduser.te b/policy/modules/roles/unconfineduser.te
index 2f3ae2907a..585e05b81f 100644
--- a/policy/modules/roles/unconfineduser.te
+++ b/policy/modules/roles/unconfineduser.te
@@ -340,6 +340,10 @@ optional_policy(`
 #	mock_role(unconfined_r, unconfined_t)
 #')
 
+optional_policy(`
+	modutils_domtrans_kmod(unconfined_t)
+')
+
 optional_policy(`
 	mozilla_role_plugin(unconfined_r)