From 65b804ea592c667bfd8c52adc750e52d4177f835 Mon Sep 17 00:00:00 2001
From: Linux_zhang <Linux_zhang@h-partners.com>
Date: Tue, 25 Feb 2025 11:05:00 +0800
Subject: [PATCH] add avc for haveged
Resolves: https://gitee.com/src-openeuler/haveged/issues/IBMY06

---
 policy/modules/contrib/entropyd.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/contrib/entropyd.te b/policy/modules/contrib/entropyd.te
index 7e63592..5b5a2ec 100644
--- a/policy/modules/contrib/entropyd.te
+++ b/policy/modules/contrib/entropyd.te
@@ -33,6 +33,9 @@ allow entropyd_t self:capability { dac_read_search  ipc_lock sys_admin };
 dontaudit entropyd_t self:capability sys_tty_config;
 allow entropyd_t self:process signal_perms;
 
+fs_rw_inherited_tmpfs_files(entropyd_t)
+allow entropyd_t tmpfs_t:file {map getattr open}; 
+
 manage_files_pattern(entropyd_t, entropyd_var_run_t, entropyd_var_run_t)
 files_pid_filetrans(entropyd_t, entropyd_var_run_t, file)
 
-- 
2.33.0