From 2f054c67a20460bbdb00b0cd76baba61daf10db7 Mon Sep 17 00:00:00 2001 From: Laurent Bigonville Date: Thu, 1 Nov 2018 11:12:26 +0100 Subject: [PATCH] irqbalance now creates an abstract socket --- policy/modules/services/irqbalance.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/irqbalance.te b/policy/modules/services/irqbalance.te index a71058d86..ade99be04 100644 --- a/policy/modules/services/irqbalance.te +++ b/policy/modules/services/irqbalance.te @@ -28,6 +28,7 @@ allow irqbalance_t self:capability { setpcap }; dontaudit irqbalance_t self:capability sys_tty_config; allow irqbalance_t self:process { getcap getsched setcap signal_perms }; allow irqbalance_t self:udp_socket create_socket_perms; +allow irqbalance_t self:unix_stream_socket create_stream_socket_perms; manage_files_pattern(irqbalance_t, irqbalance_pid_t, irqbalance_pid_t) files_pid_filetrans(irqbalance_t, irqbalance_pid_t, file)