testing: allow dracut_t to use CAP_SYS_ADMIN

0xC0ncord · 0xC0ncord · commit cd1d8d9220d7 · 2026-01-27T10:40:59.000-05:00
dracut uses fsfreeze when building an initrd.

Signed-off-by: Kenton Groombridge &lt;concord@gentoo.org&gt;
diff --git a/testing/sechecker.ini b/testing/sechecker.ini
@@ -103,6 +103,7 @@ exempt_source = acpi_t
                 dockerd_t           # Container engine (namespacing)
                 dockerd_user_t      # Container engine (namespacing)
                 dphysswapfile_t     # Configure swap files
+                dracut_t            # Needed to use fsfreeze when building an initrd
                 entropyd_t          # Add entropy to the system
                 fapolicyd_t
                 fsadm_t
