diff --git a/refpolicy/policy/modules/services/bind.te b/refpolicy/policy/modules/services/bind.te index 9fe4d030f..c811b1f81 100644 --- a/refpolicy/policy/modules/services/bind.te +++ b/refpolicy/policy/modules/services/bind.te @@ -276,6 +276,15 @@ optional_policy(`networkmanager.te',` type NetworkManager_t; ') + optional_policy(`dbus.te',` + gen_require(` + class dbus send_msg; + ') + + allow NetworkManager_t named_t:dbus send_msg; + allow named_t NetworkManager_t:dbus send_msg; + ') + bind_domtrans(NetworkManager_t) allow NetworkManager_t named_zone_t:dir search; diff --git a/refpolicy/policy/modules/services/networkmanager.te b/refpolicy/policy/modules/services/networkmanager.te index 3b17fa7da..8da8b1344 100644 --- a/refpolicy/policy/modules/services/networkmanager.te +++ b/refpolicy/policy/modules/services/networkmanager.te @@ -170,9 +170,6 @@ optional_policy(`dbus.te',` allow NetworkManager_t apmd_t:dbus send_msg; allow apmd_t NetworkManager_t:dbus send_msg; - allow NetworkManager_t named_t:dbus send_msg; - allow named_t NetworkManager_t:dbus send_msg; - dbus_system_bus_client_template(NetworkManager,NetworkManager_t) dbus_connect_system_bus(NetworkManager_t) dbus_send_system_bus_msg(NetworkManager_t)