[rpms/icecream] epel10: update selinux policy

[rpms/icecream] epel10: update selinux policy

[Michal Schmidt]

A new commit has been pushed.

Repo   : rpms/icecream
Branch : epel10
Commit : 04acc34c2c5e8a17bd8dc803b7f6116a123d0b3e
Author : Michal Schmidt <mschmidt@redhat.com>
Date   : 2019-09-27T17:01:38+02:00
Stats  : +5/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/icecream/c/04acc34c2c5e8a17bd8dc803b7f6116a123d0b3e?branch=epel10

Log:
update selinux policy

---
diff --git a/icecream.te b/icecream.te
index 76c5687..a3d14dc 100644
--- a/icecream.te
+++ b/icecream.te
@@ -1,5 +1,5 @@
 
-policy_module(icecream,0.1.8)
+policy_module(icecream,0.1.9)
 
 ########################################
 #
@@ -129,6 +129,7 @@ auth_use_nsswitch(iceccd_t)
 
 allow iceccd_createenv_t self:fifo_file rw_fifo_file_perms;
 
+dontaudit iceccd_createenv_t self:process { setfscreate };
 dontaudit iceccd_createenv_t iceccd_tmp_t:file { execute };
 
 manage_dirs_pattern(iceccd_createenv_t, iceccd_cache_t, iceccd_cache_t)
@@ -137,6 +138,7 @@ manage_files_pattern(iceccd_createenv_t, iceccd_cache_t, iceccd_cache_t)
 
 manage_dirs_pattern(iceccd_createenv_t, iceccd_tmp_t, iceccd_tmp_t)
 manage_files_pattern(iceccd_createenv_t, iceccd_tmp_t, iceccd_tmp_t)
+allow iceccd_createenv_t iceccd_tmp_t:file { map };
 files_tmp_filetrans(iceccd_createenv_t, iceccd_tmp_t, { dir file })
 
 corecmd_exec_bin(iceccd_createenv_t)
@@ -159,6 +161,8 @@ libs_use_shared_libs(iceccd_createenv_t)
 
 miscfiles_read_localization(iceccd_createenv_t)
 
+fs_getattr_tmpfs(iceccd_createenv_t)
+
 userdom_dontaudit_search_user_home_dirs(iceccd_createenv_t)
 
 optional_policy(`