Allow dirsrv_t to have fsetid capability

I ran into an SELinux violation during some testing.  This patch
allows ns-slapd to have the fsetid capability on itself, which
eliminates the AVC.

1 files changed, 1 insertions, 1 deletions

diff --git a/selinux/dirsrv.te b/selinux/dirsrv.te
index ef09fb29..1880e6f8 100644
--- a/selinux/dirsrv.te
+++ b/selinux/dirsrv.te
@@ -86,7 +86,7 @@ allow dirsrv_t self:fifo_file { read write };
 
 # process stuff
 allow dirsrv_t self:process { getsched setsched setfscreate signal_perms};
-allow dirsrv_t self:capability { sys_nice setuid setgid chown dac_override fowner };
+allow dirsrv_t self:capability { sys_nice setuid setgid fsetid chown dac_override fowner };
 
 # semaphores
 allow dirsrv_t self:sem all_sem_perms;