nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adding dontaudit interfaces in sysnet

Browse Source 
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2012-03-22 21:10:13 +01:00 committed by Chris PeBenito
parent cb29c82a28
commit 2260ef56f8
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/system/sysnetwork.if
View File

@ -64,6 +64,25 @@ interface(`sysnet_dontaudit_use_dhcpc_fds',`
dontaudit $1 dhcpc_t:fd use;
')
########################################
## <summary>
## Do not audit attempts to read/write to the
## dhcp unix stream socket descriptors.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`sysnet_dontaudit_rw_dhcpc_unix_stream_sockets',`
gen_require(`
type dhcpc_t;
')
dontaudit $1 dhcpc_t:unix_stream_socket { read write };
')
########################################
## <summary>
## Send a SIGCHLD signal to the dhcp client.