From 0e70ed6df00a5f1c28d0bee8a6db61d88bfdd685 Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@fedoraproject.org>
Date: Oct 02 2009 06:46:58 +0000
Subject: - dovecot needs setcap/getcap

- Fix up sssd policy

---

diff --git a/policy-20090521.patch b/policy-20090521.patch
index 32190c8..513adef 100644
--- a/policy-20090521.patch
+++ b/policy-20090521.patch
@@ -3766,6 +3766,17 @@ diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/pol
 +	fprintd_dbus_chat(openvpn_t)
  	networkmanager_dbus_chat(openvpn_t)
  ')
+diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/pcscd.if serefpolicy-3.6.12/policy/modules/services/pcscd.if
+--- nsaserefpolicy/policy/modules/services/pcscd.if	2009-04-07 21:54:47.000000000 +0200
++++ serefpolicy-3.6.12/policy/modules/services/pcscd.if	2009-10-02 08:35:36.000000000 +0200
+@@ -53,6 +53,5 @@
+ 	')
+ 
+ 	files_search_pids($1)
+-	allow $1 pcscd_var_run_t:sock_file write;
+-	allow $1 pcscd_t:unix_stream_socket connectto;
++	stream_connect_pattern($1, pcscd_var_run_t, pcscd_var_run_t, pcscd_t)	
+ ')
 diff -b -B --ignore-all-space --exclude-from=exclude -N -u -r nsaserefpolicy/policy/modules/services/pcscd.te serefpolicy-3.6.12/policy/modules/services/pcscd.te
 --- nsaserefpolicy/policy/modules/services/pcscd.te	2009-04-07 21:54:45.000000000 +0200
 +++ serefpolicy-3.6.12/policy/modules/services/pcscd.te	2009-06-25 10:21:01.000000000 +0200