Allow mozilla_plugin_t to setcap (#981796)

fedora-selinux · Aug 22, 2014 · c9b3520 · c9b3520
1 parent 51c1bfe
commit c9b3520
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mozilla.te b/mozilla.te
@@ -330,7 +330,7 @@ optional_policy(`
 dontaudit mozilla_plugin_t self:capability { sys_admin ipc_lock sys_nice sys_tty_config };
 dontaudit mozilla_plugin_t self:capability2 block_suspend;
 
-allow mozilla_plugin_t self:process { setpgid getsched setsched signal_perms execmem execstack setrlimit transition };
+allow mozilla_plugin_t self:process { setcap setpgid getsched setsched signal_perms execmem execstack setrlimit transition };
 allow mozilla_plugin_t self:netlink_route_socket r_netlink_socket_perms;
 allow mozilla_plugin_t self:netlink_socket create_socket_perms;
 allow mozilla_plugin_t self:tcp_socket create_stream_socket_perms;