nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

iptables: allow reading initrc pipes

Browse Source 
The systemd service calls a script which reads the saved rules from a
file piped to stdin.

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-03-11 21:21:26 -05:00
parent 7ca9dcea1f
commit a1a9c33e88
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/system/iptables.te
View File

@ -86,6 +86,7 @@ auth_use_nsswitch(iptables_t)
init_use_fds(iptables_t)
init_use_script_ptys(iptables_t)
# to allow rules to be saved on reboot:
init_rw_script_pipes(iptables_t)
init_rw_script_tmp_files(iptables_t)
init_rw_script_stream_sockets(iptables_t)