diff --git a/selinux/qubes-meminfo-writer.if b/selinux/qubes-meminfo-writer.if index ed578db2..366db5c4 100644 --- a/selinux/qubes-meminfo-writer.if +++ b/selinux/qubes-meminfo-writer.if @@ -9,9 +9,9 @@ ## ## interface(`qubes_meminfo_writer_signal',` - gen_require(`` + gen_require(` type qubes_meminfo_writer_t, qubes_meminfo_writer_var_run_t; - '')` + ')` allow '$1` qubes_meminfo_writer_t:process signal; allow '$1` qubes_meminfo_writer_var_run_t:file 'read_file_perms; ')