RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

isns: Updates from testing. 

Signed-off-by: Chris PeBenito <Christopher.PeBenito@microsoft.com>
This commit is contained in:
Chris PeBenito 2022-05-02 15:39:28 +00:00 committed by Chris PeBenito
parent 39657b7f61
commit e0784b866d
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/services/isns.te
View File

@ -27,6 +27,7 @@ allow isnsd_t self:capability kill;
allow isnsd_t self:process signal; allow isnsd_t self:process signal;
allow isnsd_t self:fifo_file rw_fifo_file_perms; allow isnsd_t self:fifo_file rw_fifo_file_perms;
allow isnsd_t self:udp_socket { accept listen }; allow isnsd_t self:udp_socket { accept listen };
allow isnsd_t self:tcp_socket create_stream_socket_perms;
allow isnsd_t self:unix_stream_socket { accept listen }; allow isnsd_t self:unix_stream_socket { accept listen };
manage_dirs_pattern(isnsd_t, isnsd_var_lib_t, isnsd_var_lib_t) manage_dirs_pattern(isnsd_t, isnsd_var_lib_t, isnsd_var_lib_t)
@ -37,6 +38,8 @@ manage_sock_files_pattern(isnsd_t, isnsd_runtime_t, isnsd_runtime_t)
manage_files_pattern(isnsd_t, isnsd_runtime_t, isnsd_runtime_t) manage_files_pattern(isnsd_t, isnsd_runtime_t, isnsd_runtime_t)
files_runtime_filetrans(isnsd_t, isnsd_runtime_t, { file sock_file }) files_runtime_filetrans(isnsd_t, isnsd_runtime_t, { file sock_file })
kernel_read_crypto_sysctls(isnsd_t)
corenet_all_recvfrom_netlabel(isnsd_t) corenet_all_recvfrom_netlabel(isnsd_t)
corenet_tcp_sendrecv_generic_if(isnsd_t) corenet_tcp_sendrecv_generic_if(isnsd_t)
corenet_tcp_sendrecv_generic_node(isnsd_t) corenet_tcp_sendrecv_generic_node(isnsd_t)