selinux: Change write to append for appending to log

Signed-off-by: Stefan Berger <[email protected]>
stefanberger · Oct 1, 2024 · fce9d3e · fce9d3e
1 parent 2d4a4c5
commit fce9d3e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/selinux/swtpm.te b/src/selinux/swtpm.te
@@ -34,7 +34,7 @@ allow swtpm_t virt_var_lib_t:dir { add_name remove_name write };
 allow swtpm_t virt_var_lib_t:file { create rename setattr unlink write };
 allow swtpm_t virtqemud_t:unix_stream_socket { read write getattr };
 allow swtpm_t virtqemud_tmp_t:file { open write };
-allow swtpm_t svirt_image_t:file { open write };  # BZ2306817
+allow swtpm_t svirt_image_t:file { open append };  # BZ2306817
 
 
 domain_use_interactive_fds(swtpm_t)