userdomain: allow tpm2 to run for all users

Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
SELinuxProject · Jan 16, 2025 · 0021c3c · 0021c3c
1 parent 4f65837
commit 0021c3c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
@@ -937,6 +937,10 @@ template(`userdom_common_user_template',`
 		virt_home_filetrans_svirt_home($1_t, dir, "qemu")
 		virt_home_filetrans_virt_home($1_t, dir, "VirtualMachines")
 	')
+
+	optional_policy(`
+		tpm2_run($1_t, $1_r)
+	')
 ')
 
 #######################################