RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #408 from ffontaine/master

This commit is contained in:
Chris PeBenito 2021-09-28 13:13:52 -04:00
parent f60be8247a 67394d078c
commit 247b1300ad
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
policy/modules/services/wireguard.te
View File

@ -61,10 +61,6 @@ corecmd_exec_shell(wireguard_t)
domain_use_interactive_fds(wireguard_t)
# wg-quick can be configured to run iptables and other networking
# config tools when bringing up/down the wg interfaces
iptables_domtrans(wireguard_t)
# wg-quick tries to read /proc/filesystem when running "stat" and "mv" commands
kernel_dontaudit_read_system_state(wireguard_t)
kernel_dontaudit_search_kernel_sysctl(wireguard_t)
@ -75,3 +71,9 @@ miscfiles_read_localization(wireguard_t)
sysnet_run_ifconfig(wireguard_t, wireguard_roles)
userdom_use_user_terminals(wireguard_t)
# wg-quick can be configured to run iptables and other networking
# config tools when bringing up/down the wg interfaces
optional_policy(`
iptables_domtrans(wireguard_t)
')