diff --git a/policy/modules/admin/netutils.te b/policy/modules/admin/netutils.te index e0791b965..7bd6d5c34 100644 --- a/policy/modules/admin/netutils.te +++ b/policy/modules/admin/netutils.te @@ -35,7 +35,7 @@ init_system_domain(traceroute_t, traceroute_exec_t) # Perform network administration operations and have raw access to the network. allow netutils_t self:capability { net_admin net_raw setuid setgid }; dontaudit netutils_t self:capability sys_tty_config; -allow netutils_t self:process signal_perms; +allow netutils_t self:process { setcap signal_perms }; allow netutils_t self:netlink_route_socket create_netlink_socket_perms; allow netutils_t self:packet_socket create_socket_perms; allow netutils_t self:udp_socket create_socket_perms;