Merge pull request cfengine#5527 from vpodzime/3.18.x-selinux_httpd_t…

…mp_files_open

[3.18.x] Allow httpd to open tmp files

misc/selinux/cfengine-enterprise.te.all

@@ -637,7 +637,7 @@ allow cfengine_httpd_t sssd_var_lib_t:dir search;
 allow cfengine_httpd_t sssd_var_lib_t:sock_file write;
 allow cfengine_httpd_t syslogd_var_run_t:dir search;
 allow cfengine_httpd_t tmp_t:sock_file write;
-allow cfengine_httpd_t tmp_t:file { create setattr unlink write rename };
+allow cfengine_httpd_t tmp_t:file { create setattr unlink write rename open };
 allow cfengine_httpd_t tmp_t:dir { add_name remove_name write read };
 allow cfengine_httpd_t var_t:dir read;