Index: fedora-policy/policy/modules/contrib/irqbalance.te =================================================================== --- fedora-policy.orig/policy/modules/contrib/irqbalance.te +++ fedora-policy/policy/modules/contrib/irqbalance.te @@ -25,8 +25,12 @@ dontaudit irqbalance_t self:capability s allow irqbalance_t self:process { getcap getsched setcap signal_perms }; allow irqbalance_t self:udp_socket create_socket_perms; +manage_dirs_pattern(irqbalance_t, irqbalance_var_run_t, irqbalance_var_run_t) manage_files_pattern(irqbalance_t, irqbalance_var_run_t, irqbalance_var_run_t) -files_pid_filetrans(irqbalance_t, irqbalance_var_run_t, file) +manage_sock_files_pattern(irqbalance_t, irqbalance_var_run_t, irqbalance_var_run_t) +files_pid_filetrans(irqbalance_t, irqbalance_var_run_t, { dir file sock_file }) + +init_nnp_daemon_domain(irqbalance_t) kernel_read_network_state(irqbalance_t) kernel_read_system_state(irqbalance_t)