From 7ef9402705b6e06582b4ad865507952f8750ebd9 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Wed, 24 Oct 2012 14:45:57 +0200 Subject: [PATCH] Arping needs setcap to cap_set_proc rhbz#869615 Signed-off-by: Dominick Grift --- policy/modules/admin/netutils.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/admin/netutils.te b/policy/modules/admin/netutils.te index e0791b965..7bd6d5c34 100644 --- a/policy/modules/admin/netutils.te +++ b/policy/modules/admin/netutils.te @@ -35,7 +35,7 @@ init_system_domain(traceroute_t, traceroute_exec_t) # Perform network administration operations and have raw access to the network. allow netutils_t self:capability { net_admin net_raw setuid setgid }; dontaudit netutils_t self:capability sys_tty_config; -allow netutils_t self:process signal_perms; +allow netutils_t self:process { setcap signal_perms }; allow netutils_t self:netlink_route_socket create_netlink_socket_perms; allow netutils_t self:packet_socket create_socket_perms; allow netutils_t self:udp_socket create_socket_perms;