From 5b082e4acfbfe460097097ca8dbe014554d6e3af Mon Sep 17 00:00:00 2001 From: Jeremy Solt Date: Mon, 30 Aug 2010 10:05:12 -0400 Subject: [PATCH] arpwatch patch from Dan Walsh --- policy/modules/services/arpwatch.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/services/arpwatch.te b/policy/modules/services/arpwatch.te index 0160ba447..f31b5c999 100644 --- a/policy/modules/services/arpwatch.te +++ b/policy/modules/services/arpwatch.te @@ -50,6 +50,7 @@ kernel_read_network_state(arpwatch_t) kernel_read_kernel_sysctls(arpwatch_t) kernel_list_proc(arpwatch_t) kernel_read_proc_symlinks(arpwatch_t) +kernel_request_load_module(arpwatch_t) corenet_all_recvfrom_unlabeled(arpwatch_t) corenet_all_recvfrom_netlabel(arpwatch_t) @@ -63,6 +64,7 @@ corenet_tcp_sendrecv_all_ports(arpwatch_t) corenet_udp_sendrecv_all_ports(arpwatch_t) dev_read_sysfs(arpwatch_t) +dev_read_usbmon_dev(arpwatch_t) dev_rw_generic_usb_dev(arpwatch_t) fs_getattr_all_fs(arpwatch_t)