From b0b4bc947c861f121c1a35c0e8037da26d115a65 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Tue, 19 Jul 2011 09:32:07 +0000 Subject: [PATCH] xtables-multi wants to getattr of the proc fs --- policy/modules/system/iptables.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/iptables.te b/policy/modules/system/iptables.te index 03abcd6c9..503282509 100644 --- a/policy/modules/system/iptables.te +++ b/policy/modules/system/iptables.te @@ -53,6 +53,7 @@ allow iptables_t iptables_tmp_t:dir manage_dir_perms; allow iptables_t iptables_tmp_t:file manage_file_perms; files_tmp_filetrans(iptables_t, iptables_tmp_t, { file dir }) +kernel_getattr_proc(iptables_t) kernel_request_load_module(iptables_t) kernel_read_system_state(iptables_t) kernel_read_network_state(iptables_t)