nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update the sysnetwork module to add some permissions needed by

Browse Source 
the dhcp client (another separate patch makes changes to the
ifconfig part).

Create auxiliary interfaces in the ntp module.

The permission to execute restorecon/setfiles (required by the
dhclient-script script and granted in a previous version of this
patch) is not granted, as it does not break the script functioning.

Include revisions from Chris PeBenito.

Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
This commit is contained in:
Chris PeBenito 2016-08-14 14:51:42 -04:00
parent 9e0566104a
commit 5481c1cc84
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/system/sysnetwork.te
View File

@ -128,9 +128,11 @@ files_search_home(dhcpc_t)
files_search_var_lib(dhcpc_t)
files_dontaudit_search_locks(dhcpc_t)
files_getattr_generic_locks(dhcpc_t)
files_manage_var_files(dhcpc_t)
fs_getattr_all_fs(dhcpc_t)
fs_search_auto_mountpoints(dhcpc_t)
fs_search_cgroup_dirs(dhcpc_t)
term_dontaudit_use_all_ttys(dhcpc_t)
term_dontaudit_use_all_ptys(dhcpc_t)
@ -225,6 +227,7 @@ optional_policy(`
optional_policy(`
ntp_initrc_domtrans(dhcpc_t)
ntp_read_drift_files(dhcpc_t)
ntp_read_conf_files(dhcpc_t)
')
optional_policy(`