RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-11 07:40:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

sysadm: allow using networkctl

Browse Source 
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
This commit is contained in:
Kenton Groombridge 2023-12-17 23:09:12 -05:00
parent 43d529e90e
commit b1a8799185
1 changed files with 3 additions and 0 deletions

3
policy/modules/roles/sysadm.te
View File

@ -33,6 +33,9 @@ ifndef(`enable_mls',`
# Local policy
#
# for networkctl and possibly other networking tools
allow sysadm_t self:netlink_route_socket rw_netlink_socket_perms;
corecmd_exec_shell(sysadm_t)
corenet_ib_access_unlabeled_pkeys(sysadm_t)