nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Additional rearrangement in tor and module version bump.

This commit is contained in:
Chris PeBenito 2010-10-27 15:04:40 -04:00
parent 2925b799f6
commit 7ff21090c1
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
policy/modules/services/tor.te
View File

@ -1,4 +1,4 @@
policy_module(tor, 1.7.0) policy_module(tor, 1.7.1)
######################################## ########################################
# #
@ -78,25 +78,24 @@ kernel_read_system_state(tor_t)
corenet_all_recvfrom_unlabeled(tor_t) corenet_all_recvfrom_unlabeled(tor_t)
corenet_all_recvfrom_netlabel(tor_t) corenet_all_recvfrom_netlabel(tor_t)
corenet_tcp_sendrecv_generic_if(tor_t) corenet_tcp_sendrecv_generic_if(tor_t)
corenet_udp_sendrecv_generic_if(tor_t)
corenet_tcp_sendrecv_generic_node(tor_t) corenet_tcp_sendrecv_generic_node(tor_t)
corenet_udp_sendrecv_generic_node(tor_t)
corenet_tcp_sendrecv_all_ports(tor_t) corenet_tcp_sendrecv_all_ports(tor_t)
corenet_udp_sendrecv_dns_port(tor_t)
corenet_tcp_sendrecv_all_reserved_ports(tor_t) corenet_tcp_sendrecv_all_reserved_ports(tor_t)
corenet_tcp_bind_generic_node(tor_t) corenet_tcp_bind_generic_node(tor_t)
corenet_udp_bind_generic_node(tor_t)
corenet_tcp_bind_tor_port(tor_t) corenet_tcp_bind_tor_port(tor_t)
corenet_udp_bind_dns_port(tor_t)
corenet_sendrecv_tor_server_packets(tor_t) corenet_sendrecv_tor_server_packets(tor_t)
corenet_sendrecv_dns_server_packets(tor_t)
# TOR will need to connect to various ports # TOR will need to connect to various ports
corenet_tcp_connect_all_ports(tor_t) corenet_tcp_connect_all_ports(tor_t)
corenet_sendrecv_all_client_packets(tor_t) corenet_sendrecv_all_client_packets(tor_t)
# ... especially including port 80 and other privileged ports # ... especially including port 80 and other privileged ports
corenet_tcp_connect_all_reserved_ports(tor_t) corenet_tcp_connect_all_reserved_ports(tor_t)
corenet_udp_bind_dns_port(tor_t)
corenet_udp_bind_generic_node(tor_t)
corenet_udp_sendrecv_generic_node(tor_t)
corenet_udp_sendrecv_generic_if(tor_t)
corenet_udp_sendrecv_dns_port(tor_t)
corenet_sendrecv_dns_server_packets(tor_t)
# tor uses crypto and needs random # tor uses crypto and needs random
dev_read_urand(tor_t) dev_read_urand(tor_t)