Index: refpolicy-2.20260618/policy/modules/system/fwupd.te
===================================================================
--- refpolicy-2.20260618.orig/policy/modules/system/fwupd.te
+++ refpolicy-2.20260618/policy/modules/system/fwupd.te
@@ -41,6 +41,9 @@ files_tmp_file(fwupd_tmp_t)
 type fwupd_var_lib_t;
 files_type(fwupd_var_lib_t)
 
+type fwupd_tmpfs_t;
+files_tmpfs_file(fwupd_tmpfs_t)
+
 type fwupdmgr_tmpfs_t;
 files_tmpfs_file(fwupdmgr_tmpfs_t)
 
@@ -62,6 +65,9 @@ allow fwupd_t self:netlink_generic_socke
 
 allow fwupd_t self:netlink_kobject_uevent_socket create_socket_perms;
 
+fs_tmpfs_filetrans(fwupd_t, fwupd_tmpfs_t, file)
+allow fwupd_t fwupd_tmpfs_t:file manage_file_perms;
+
 allow fwupd_t fwupd_conf_t:dir { watch list_dir_perms };
 allow fwupd_t fwupd_conf_t:file { map read_file_perms };
 
Index: refpolicy-2.20260618/policy/modules/apps/xscreensaver.te
===================================================================
--- refpolicy-2.20260618.orig/policy/modules/apps/xscreensaver.te
+++ refpolicy-2.20260618/policy/modules/apps/xscreensaver.te
@@ -45,6 +45,9 @@ allow xscreensaver_t xscreensaver_helper
 
 allow xscreensaver_t xscreensaver_config_t:file manage_file_perms;
 
+fs_tmpfs_filetrans(xscreensaver_t, xscreensaver_tmpfs_t, file)
+allow xscreensaver_t xscreensaver_tmpfs_t:file rw_file_perms;
+
 dev_read_sysfs(xscreensaver_t)
 dev_rw_dma_dev(xscreensaver_t)
 dev_rw_dri(xscreensaver_t)
Index: refpolicy-2.20260618/policy/modules/system/udev.te
===================================================================
--- refpolicy-2.20260618.orig/policy/modules/system/udev.te
+++ refpolicy-2.20260618/policy/modules/system/udev.te
@@ -33,6 +33,9 @@ optional_policy(`
 	kubernetes_mountpoint(udev_runtime_t)
 ')
 
+type udev_tmpfs_t;
+files_tmpfs_file(udev_tmpfs_t)
+
 ########################################
 #
 # udev Local policy
@@ -57,6 +60,9 @@ allow udev_t self:rawip_socket create_so
 # rdma_rename
 allow udev_t self:netlink_rdma_socket create_socket_perms;
 
+fs_tmpfs_filetrans(udev_t, udev_tmpfs_t, file)
+allow udev_t udev_tmpfs_t:file manage_file_perms;
+
 ifdef(`init_systemd',`
 	# systemd-vconsole-setup will be called by udev during virtual terminal initialization
 	allow udev_t self:capability sys_tty_config;
