diff --git a/policy/modules/services/tor.te b/policy/modules/services/tor.te index 5efbd405d..f7939120b 100644 --- a/policy/modules/services/tor.te +++ b/policy/modules/services/tor.te @@ -1,4 +1,4 @@ -policy_module(tor, 1.7.0) +policy_module(tor, 1.7.1) ######################################## # @@ -78,25 +78,24 @@ kernel_read_system_state(tor_t) corenet_all_recvfrom_unlabeled(tor_t) corenet_all_recvfrom_netlabel(tor_t) corenet_tcp_sendrecv_generic_if(tor_t) +corenet_udp_sendrecv_generic_if(tor_t) corenet_tcp_sendrecv_generic_node(tor_t) +corenet_udp_sendrecv_generic_node(tor_t) corenet_tcp_sendrecv_all_ports(tor_t) +corenet_udp_sendrecv_dns_port(tor_t) corenet_tcp_sendrecv_all_reserved_ports(tor_t) corenet_tcp_bind_generic_node(tor_t) +corenet_udp_bind_generic_node(tor_t) corenet_tcp_bind_tor_port(tor_t) +corenet_udp_bind_dns_port(tor_t) corenet_sendrecv_tor_server_packets(tor_t) +corenet_sendrecv_dns_server_packets(tor_t) # TOR will need to connect to various ports corenet_tcp_connect_all_ports(tor_t) corenet_sendrecv_all_client_packets(tor_t) # ... especially including port 80 and other privileged ports corenet_tcp_connect_all_reserved_ports(tor_t) -corenet_udp_bind_dns_port(tor_t) -corenet_udp_bind_generic_node(tor_t) -corenet_udp_sendrecv_generic_node(tor_t) -corenet_udp_sendrecv_generic_if(tor_t) -corenet_udp_sendrecv_dns_port(tor_t) -corenet_sendrecv_dns_server_packets(tor_t) - # tor uses crypto and needs random dev_read_urand(tor_t)