nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

irc.te: Allow irc_t access to unix_dgram_socket sendto to allow clients to

Browse Source 
connect to a SOCKS proxy.

Signed-off-by: Jonathan Davies <jpds@protonmail.com>
This commit is contained in:
Jonathan Davies 2021-04-27 20:58:10 +01:00
parent cd783138ac
commit 508289a967
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/apps/irc.te
View File

@ -40,7 +40,7 @@ userdom_user_tmp_file(irc_tmp_t)
allow irc_t self:process { getsched signal sigkill };
allow irc_t self:fifo_file rw_fifo_file_perms;
allow irc_t self:unix_dgram_socket create_socket_perms;
allow irc_t self:unix_dgram_socket { create_socket_perms sendto };
allow irc_t self:unix_stream_socket { accept listen };
allow irc_t irc_conf_t:file read_file_perms;