On 11/22/2017 9:25 AM, Honggang LI wrote:
> On Wed, Nov 22, 2017 at 07:43:36AM -0600, Daniel Jurgens wrote:
>> Upstream refpolicy has a patch that allow access to unlabeled PKeys, is it applied in your policy? Even if it is there could additional distro specific changes required, for the unconfined user for example.
> Yes, this policy has been applied.
>
>> https://github.com/TresysTechnology/refpolicy/commit/25a5b2427447eb14edb07ce302217d37528813bc
>>
>> Apologies if this link is converted into a monstrosity to a Microsoft proxy. It will take you to github.
Can you send the audit log?