RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Additional rearrangement in tor and module version bump.

This commit is contained in:
Chris PeBenito 2010-10-27 15:04:40 -04:00
parent 2925b799f6
commit 7ff21090c1
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
policy/modules/services/tor.te
View File

@ -1,4 +1,4 @@
policy_module(tor, 1.7.0)
policy_module(tor, 1.7.1)
########################################
#
@ -78,25 +78,24 @@ kernel_read_system_state(tor_t)
corenet_all_recvfrom_unlabeled(tor_t)
corenet_all_recvfrom_netlabel(tor_t)
corenet_tcp_sendrecv_generic_if(tor_t)
corenet_udp_sendrecv_generic_if(tor_t)
corenet_tcp_sendrecv_generic_node(tor_t)
corenet_udp_sendrecv_generic_node(tor_t)
corenet_tcp_sendrecv_all_ports(tor_t)
corenet_udp_sendrecv_dns_port(tor_t)
corenet_tcp_sendrecv_all_reserved_ports(tor_t)
corenet_tcp_bind_generic_node(tor_t)
corenet_udp_bind_generic_node(tor_t)
corenet_tcp_bind_tor_port(tor_t)
corenet_udp_bind_dns_port(tor_t)
corenet_sendrecv_tor_server_packets(tor_t)
corenet_sendrecv_dns_server_packets(tor_t)
# TOR will need to connect to various ports
corenet_tcp_connect_all_ports(tor_t)
corenet_sendrecv_all_client_packets(tor_t)
# ... especially including port 80 and other privileged ports
corenet_tcp_connect_all_reserved_ports(tor_t)
corenet_udp_bind_dns_port(tor_t)
corenet_udp_bind_generic_node(tor_t)
corenet_udp_sendrecv_generic_node(tor_t)
corenet_udp_sendrecv_generic_if(tor_t)
corenet_udp_sendrecv_dns_port(tor_t)
corenet_sendrecv_dns_server_packets(tor_t)
# tor uses crypto and needs random
dev_read_urand(tor_t)