From Debian package 0.0.20080702-6 Allow users to read symlinks under /var/lib (for python) Index: policy/modules/system/userdomain.if =================================================================== --- policy/modules/system/userdomain.if.orig +++ policy/modules/system/userdomain.if @@ -541,6 +541,7 @@ files_read_var_symlinks($1_t) files_read_generic_spool($1_t) files_read_var_lib_files($1_t) + files_read_var_lib_symlinks($1_t) # Stat lost+found. files_getattr_lost_found_dirs($1_t)