diff --git a/policy/modules/services/abrt.if b/policy/modules/services/abrt.if index e9ed246ef..b2b165787 100644 --- a/policy/modules/services/abrt.if +++ b/policy/modules/services/abrt.if @@ -34,6 +34,7 @@ interface(`abrt_exec',` type abrt_exec_t; ') + corecmd_search_bin($1) can_exec($1, abrt_exec_t) ') diff --git a/policy/modules/services/abrt.te b/policy/modules/services/abrt.te index 559ce2d22..0099ed34c 100644 --- a/policy/modules/services/abrt.te +++ b/policy/modules/services/abrt.te @@ -76,7 +76,14 @@ kernel_rw_kernel_sysctl(abrt_t) corecmd_exec_bin(abrt_t) corecmd_exec_shell(abrt_t) +corenet_all_recvfrom_netlabel(abrt_t) +corenet_all_recvfrom_unlabeled(abrt_t) +corenet_sendrecv_http_client_packets(abrt_t) +corenet_tcp_bind_generic_node(abrt_t) corenet_tcp_connect_http_port(abrt_t) +corenet_tcp_sendrecv_generic_if(abrt_t) +corenet_tcp_sendrecv_generic_node(abrt_t) +corenet_tcp_sendrecv_generic_port(abrt_t) dev_read_urand(abrt_t)