Index: fedora-policy-20210309/policy/modules/system/selinuxutil.te =================================================================== --- fedora-policy-20210309.orig/policy/modules/system/selinuxutil.te +++ fedora-policy-20210309/policy/modules/system/selinuxutil.te @@ -238,6 +238,10 @@ ifdef(`hide_broken_symptoms',` ') optional_policy(` + packagekit_read_write_fifo(load_policy_t) +') + +optional_policy(` portage_dontaudit_use_fds(load_policy_t) ') @@ -619,6 +623,10 @@ logging_send_audit_msgs(setfiles_t) logging_send_syslog_msg(setfiles_t) optional_policy(` + packagekit_read_write_fifo(setfiles_t) +') + +optional_policy(` cloudform_dontaudit_write_cloud_log(setfiles_t) ') Index: fedora-policy-20210309/policy/modules/system/selinuxutil.if =================================================================== --- fedora-policy-20210309.orig/policy/modules/system/selinuxutil.if +++ fedora-policy-20210309/policy/modules/system/selinuxutil.if @@ -777,6 +777,8 @@ interface(`seutil_dontaudit_read_config' dontaudit $1 selinux_config_t:dir search_dir_perms; dontaudit $1 selinux_config_t:file read_file_perms; + # /etc/selinux/config was a link to /etc/sysconfig/selinux-policy, ignore read attemps + dontaudit $1 selinux_config_t:lnk_file read_lnk_file_perms; ') ########################################