Not sure how I didn't notice this missing require before. Signed-off-by: Dave Sugar <dsugar@xxxxxxxxxx> --- policy/modules/system/init.if | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index 2e74b515..c3c0cf27 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -204,6 +204,7 @@ interface(`init_spec_daemon_domain',` gen_require(` type init_t; role system_r; + attribute daemon; ') typeattribute $1 daemon; -- 2.19.2