diff --git a/policy/modules/contrib/virt.te b/policy/modules/contrib/virt.te index 5507fa37d3..dc5c2572de 100644 --- a/policy/modules/contrib/virt.te +++ b/policy/modules/contrib/virt.te @@ -2280,6 +2280,7 @@ optional_policy(` optional_policy(` systemd_dbus_chat_machined(virtqemud_t) + systemd_homed_stream_connect(virtqemud_t) ') optional_policy(` diff --git a/policy/modules/system/systemd-homed.te b/policy/modules/system/systemd-homed.te index 7ef7ffe674..314489d1d9 100644 --- a/policy/modules/system/systemd-homed.te +++ b/policy/modules/system/systemd-homed.te @@ -166,6 +166,7 @@ allow systemd_homework_t self:user_namespace create; allow systemd_homework_t systemd_homed_t:unix_dgram_socket sendto; # /var/home +files_create_home_dir(systemd_homework_t) files_delete_home_dir(systemd_homework_t) files_search_home(systemd_homework_t) files_home_filetrans(systemd_homework_t, systemd_homed_crypto_luks_t, file) @@ -250,6 +251,7 @@ optional_policy(` optional_policy(` # labeled home directories + userdom_home_filetrans_user_home_dir(systemd_homework_t) userdom_home_manager(systemd_homework_t) userdom_manage_home_role(system_r, systemd_homework_t) ')