Add list_dir_perms to kerberos_read_keytab

In the interface kerberos_read_keytab is allowed to read krb5_keytab_t files, but wasn't allowed to read krb5_keytab_t dirs, which leads to AVC message Resolves: rhbz#2112729
fedora-selinux · Jun 23, 2023 · 3d4190d · 3d4190d
1 parent c364da9
commit 3d4190d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/policy/modules/contrib/kerberos.if b/policy/modules/contrib/kerberos.if
@@ -199,7 +199,7 @@ interface(`kerberos_read_keytab',`
 	')
 
 	files_search_etc($1)
-    allow $1 krb5_keytab_t:dir search_dir_perms;
+	allow $1 krb5_keytab_t:dir list_dir_perms;
 	allow $1 krb5_keytab_t:file read_file_perms;
 ')