From c0bd1fbe5f557f9dac7176f35c3cb5f5ea925c09 Mon Sep 17 00:00:00 2001 From: Sven Vermeulen Date: Sat, 7 Jun 2014 21:44:32 +0200 Subject: [PATCH] Add dropbox_port_t support The dropbox application has a feature called "LAN Sync" which works on TCP & UDP port 17500. Marking this port as dropbox_port_t (instead of the currently default unreserved_port_t) allows for more fine-grained access control to this resource. Signed-off-by: Sven Vermeulen --- policy/modules/kernel/corenetwork.te.in | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/kernel/corenetwork.te.in b/policy/modules/kernel/corenetwork.te.in index 7fe89bce7..5f28977ca 100644 --- a/policy/modules/kernel/corenetwork.te.in +++ b/policy/modules/kernel/corenetwork.te.in @@ -120,6 +120,7 @@ network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0, network_port(dict, tcp,2628,s0) network_port(distccd, tcp,3632,s0) network_port(dns, tcp,53,s0, udp,53,s0) +network_port(dropbox, tcp,17500,s0, udp,17500,s0) network_port(efs, tcp,520,s0) network_port(embrace_dp_c, tcp,3198,s0, udp,3198,s0) network_port(epmap, tcp,135,s0, udp,135,s0)