diff --git a/policy/modules/contrib/irqbalance.te b/policy/modules/contrib/irqbalance.te index b5c9bfa945..8f52aa8331 100644 --- a/policy/modules/contrib/irqbalance.te +++ b/policy/modules/contrib/irqbalance.te @@ -23,6 +23,7 @@ files_pid_file(irqbalance_var_run_t) allow irqbalance_t self:capability { setpcap net_admin }; dontaudit irqbalance_t self:capability sys_tty_config; +allow irqbalance_t self:cap_userns setpcap; allow irqbalance_t self:process { getcap getsched setcap signal_perms }; allow irqbalance_t self:udp_socket create_socket_perms;