From 1a84ad594cee44509677aae69c8eb0a263d3a1f6 Mon Sep 17 00:00:00 2001
From: Martin Pitt <mpitt@redhat.com>
Date: Wed, 1 Feb 2023 20:44:12 +0100
Subject: [PATCH] selinux: Allow cockpit-session to run gnome-keyring

https://bugzilla.redhat.com/show_bug.cgi?id=2165996
---
 selinux/cockpit.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/selinux/cockpit.te b/selinux/cockpit.te
index 57a07ef9a..c2977853f 100644
--- a/selinux/cockpit.te
+++ b/selinux/cockpit.te
@@ -198,3 +198,7 @@ optional_policy(`
     ')
     cockpit_read_pid_files(local_login_t)
 ')
+
+optional_policy(`
+    gnome_exec_keyringd(cockpit_session_t)
+')