RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update corenetwork module 

* remove deprecated interfaces
* label tcp port 2812 for monit
This commit is contained in:
cgzones 2017-01-06 15:06:37 +01:00
parent a67c2a819d
commit 05a9fdfe6e
2 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
policy/modules/kernel/corenetwork.fc
View File

@ -1,13 +1,12 @@
/dev/ippp.* -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/pppox.* -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/tap.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/dev/ippp.* -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/pppox.* -c gen_context(system_u:object_r:ppp_device_t,s0)
/dev/tap.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/dev/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/dev/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/lib/udev/devices/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/lib/udev/devices/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/lib/udev/devices/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/lib/udev/devices/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)
/usr/lib/udev/devices/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/usr/lib/udev/devices/ppp -c gen_context(system_u:object_r:ppp_device_t,s0)
/usr/lib/udev/devices/net/.* -c gen_context(system_u:object_r:tun_tap_device_t,s0)

1
policy/modules/kernel/corenetwork.te.in
View File

@ -176,6 +176,7 @@ network_port(matahari, tcp,49000,s0, udp,49000,s0)
network_port(memcache, tcp,11211,s0, udp,11211,s0)
network_port(milter) # no defined portcon
network_port(mmcc, tcp,5050,s0, udp,5050,s0)
network_port(monit, tcp,2812,s0)
network_port(monopd, tcp,1234,s0)
network_port(mountd, tcp,20048,s0, udp,20048,s0)
network_port(movaz_ssc, tcp,5252,s0, udp,5252,s0)