From 51422c4a4277924046514a18b67a38b896d698f0 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Fri, 28 Jan 2022 17:40:25 +0100
Subject: [PATCH] Allow ModemManager connect to the unconfined user domain

Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/51422c4a4277924046514a18b67a38b896d698f0
Conflict: NA

The modemmanager_t domain was allowed to connect to unconfined_t
over a unix domain stream socket.

Resolves: rhbz#1961571
Signed-off-by: lujie54 <lujie54@huawei.com>
---
 policy/modules/contrib/modemmanager.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/policy/modules/contrib/modemmanager.te b/policy/modules/contrib/modemmanager.te
index 857ed6b..9a132b2 100644
--- a/policy/modules/contrib/modemmanager.te
+++ b/policy/modules/contrib/modemmanager.te
@@ -82,3 +82,7 @@ optional_policy(`
 	udev_read_db(modemmanager_t)
 	udev_manage_pid_files(modemmanager_t)
 ')
+
+optional_policy(`
+	unconfined_stream_connect(modemmanager_t)
+')
-- 
1.8.3.1