Added getattr access for cf-serverd to socket file in CFEngine SELinu…

…x policy

Ticket: ENT-12466
Changelog: title

misc/selinux/cfengine-enterprise.te.all

@@ -326,7 +326,7 @@ allow cfengine_serverd_t cfengine_var_lib_t:file execute_no_trans;
 # allow cf-serverd to connect to the CFEngine port and to write into a local socket (in case of
 # call-collect on hosts and the hub itself, respectively)
 allow cfengine_serverd_t unreserved_port_t:tcp_socket name_connect;
-allow cfengine_serverd_t cfengine_var_lib_t:sock_file write;
+allow cfengine_serverd_t cfengine_var_lib_t:sock_file { getattr write };
 allow cfengine_serverd_t cfengine_hub_t:unix_stream_socket connectto;
 
 # TODO: this should not be needed