Description: Allow systemd-logind to use pidfds from unconfined sessions
 pam_systemd passes a pidfd to systemd-logind when creating a session.  Without
 fd use permission, enforcing SELinux leaves systemd-logind running but causes
 org.freedesktop.login1 to disappear from the system bus.
Origin: upstream, https://github.com/SELinuxProject/refpolicy/commit/a742066011070c6696eda00442a46d1e9970a614
Applied-Upstream: a742066011070c6696eda00442a46d1e9970a614
Forwarded: not-needed
Last-Update: 2026-09-10
---
 policy/modules/system/systemd.te | 1 +
 1 file changed, 1 insertion(+)

--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1159,6 +1159,7 @@ optional_policy(`
 
 optional_policy(`
 	unconfined_dbus_send(systemd_logind_t)
+	unconfined_use_fds(systemd_logind_t)
 ')
 
 #########################################