Blame SOURCES/fapolicyd-selinux-2.patch

6db311
diff -up ./fapolicyd-selinux-0.4/fapolicyd.te.selinux2 ./fapolicyd-selinux-0.4/fapolicyd.te
6db311
--- ./fapolicyd-selinux-0.4/fapolicyd.te.selinux2	2022-11-11 10:46:51.016420807 +0100
6db311
+++ ./fapolicyd-selinux-0.4/fapolicyd.te	2022-11-11 10:47:25.161793205 +0100
6db311
@@ -39,10 +39,15 @@ allow fapolicyd_t self:unix_dgram_socket
6db311
 
6db311
 gen_require(`
6db311
 	attribute file_type;
6db311
+    attribute filesystem_type;
6db311
+    attribute mountpoint;
6db311
 ')
6db311
 allow fapolicyd_t file_type:dir { watch_mount watch_with_perm };
6db311
 allow fapolicyd_t file_type:file { watch_mount watch_with_perm };
6db311
 
6db311
+allow fapolicyd_t filesystem_type : filesystem { watch };
6db311
+allow fapolicyd_t mountpoint : dir { watch_sb };
6db311
+
6db311
 manage_files_pattern(fapolicyd_t, fapolicyd_log_t, fapolicyd_log_t)
6db311
 logging_log_filetrans(fapolicyd_t, fapolicyd_log_t, file)
6db311