nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Signed-off-by: George Zenner <zen@pyl.onl>

Browse Source 
modified:   policy/modules/system/sysnetwork.if
This commit is contained in:
George Zenner 2023-02-10 15:45:09 -06:00
parent cd8b67a066
commit 105e623ee8
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/system/sysnetwork.if
View File

@ -83,6 +83,25 @@ interface(`sysnet_dontaudit_use_dhcpc_fds',`
dontaudit $1 dhcpc_t:fd use;
')
########################################
## <summary>
## Do not audit attempts to read/write to the
## dhcp unix datagram socket descriptors.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`sysnet_dontaudit_rw_dhcpc_unix_dgram_sockets',`
gen_require(`
type dhcpc_t;
')
dontaudit $1 dhcpc_t:unix_dgram_socket { read write };
')
########################################
## <summary>
## Do not audit attempts to read/write to the