Allow virtqemud relabel user tmp files and socket files

Resolves: RHEL-49763

policy/modules/contrib/virt.te

@@ -2285,6 +2285,8 @@ optional_policy(`
 	userdom_read_all_users_state(virtqemud_t)
 	userdom_read_user_home_content_files(virtqemud_t)
 	userdom_relabel_user_home_files(virtqemud_t)
+	userdom_relabel_user_tmp_files(virtqemud_t)
+	userdom_relabelfrom_user_tmp_sock_files(virtqemud_t)
 ')
 
 #######################################

policy/modules/system/userdomain.if

@@ -3522,6 +3522,7 @@ interface(`userdom_rw_user_tmp_files',`
 	rw_files_pattern($1, user_tmp_t, user_tmp_t)
 	files_search_tmp($1)
 ')
+
 ########################################
 ## <summary>
 ##	Read and write user temporary files.
@@ -3542,6 +3543,24 @@ interface(`userdom_rw_user_tmp_sock_files',`
 	files_search_tmp($1)
 ')
 
+########################################
+## <summary>
+##	Relabelfrom user temporary socket files.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`userdom_relabelfrom_user_tmp_sock_files',`
+	gen_require(`
+		type user_tmp_t;
+	')
+
+	allow $1 user_tmp_t:sock_file relabelfrom_file_perms;
+')
+
 ########################################
 ## <summary>
 ##	Do not audit attempts to manage users