diff --git a/refpolicy/policy/modules/services/cups.te b/refpolicy/policy/modules/services/cups.te index 2d6173f61..14a9d2c4d 100644 --- a/refpolicy/policy/modules/services/cups.te +++ b/refpolicy/policy/modules/services/cups.te @@ -128,15 +128,13 @@ kernel_read_network_state(cupsd_t) kernel_read_all_sysctls(cupsd_t) kernel_tcp_recvfrom(cupsd_t) +corenet_non_ipsec_sendrecv(cupsd_t) corenet_tcp_sendrecv_all_if(cupsd_t) corenet_udp_sendrecv_all_if(cupsd_t) -corenet_raw_sendrecv_all_if(cupsd_t) corenet_tcp_sendrecv_all_nodes(cupsd_t) corenet_udp_sendrecv_all_nodes(cupsd_t) -corenet_raw_sendrecv_all_nodes(cupsd_t) corenet_tcp_sendrecv_all_ports(cupsd_t) corenet_udp_sendrecv_all_ports(cupsd_t) -corenet_non_ipsec_sendrecv(cupsd_t) corenet_tcp_bind_all_nodes(cupsd_t) corenet_udp_bind_all_nodes(cupsd_t) corenet_tcp_bind_ipp_port(cupsd_t) @@ -145,6 +143,8 @@ corenet_tcp_bind_reserved_port(cupsd_t) corenet_dontaudit_tcp_bind_all_reserved_ports(cupsd_t) corenet_tcp_connect_all_ports(cupsd_t) corenet_sendrecv_hplip_client_packets(cupsd_t) +corenet_sendrecv_ipp_client_packets(cupsd_t) +corenet_sendrecv_ipp_server_packets(cupsd_t) dev_rw_printer(cupsd_t) dev_read_urand(cupsd_t)