From 76c5cbdab723508d6cd36aecc84dacd1a729aaf6 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Wed, 4 Dec 2024 20:26:36 +0100
Subject: [PATCH] Update samba-bgqd policy

In particular, permissions to read cups pid files and search sssd lib
were added.

Resolves: RHEL-69512
---
 policy/modules/contrib/samba.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/contrib/samba.te b/policy/modules/contrib/samba.te
index 041b2645de..b5affeff19 100644
--- a/policy/modules/contrib/samba.te
+++ b/policy/modules/contrib/samba.te
@@ -340,10 +340,12 @@ optional_policy(`
 
 optional_policy(`
 	cups_read_config(samba_bgqd_t)
+	cups_read_pid_files(samba_bgqd_t)
 ')
 
 optional_policy(`
 	sssd_read_public_files(samba_bgqd_t)
+	sssd_search_lib(samba_bgqd_t)
 ')
 
 ########################################