nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

netutils: allow ping to read net sysctls 

ping will check whether IPv6 is disabled.

Signed-off-by: Kenton Groombridge <concord@gentoo.org>
This commit is contained in:
Kenton Groombridge 2024-06-27 13:18:45 -04:00
parent 2e0509c9e7
commit 06a80c3d8a
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/admin/netutils.te
View File

@ -131,6 +131,7 @@ domain_use_interactive_fds(ping_t)
files_read_etc_files(ping_t) files_read_etc_files(ping_t)
kernel_read_net_sysctls(ping_t)
kernel_read_system_state(ping_t) kernel_read_system_state(ping_t)
auth_use_nsswitch(ping_t) auth_use_nsswitch(ping_t)