missing net_bind_service cap for bind_all_ports interfaces
This commit is contained in:
parent
3d03a4f40f
commit
97c57a1b3a
|
@ -819,6 +819,7 @@ interface(`corenet_tcp_bind_all_ports',`
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 port_type:tcp_socket name_bind;
|
allow $1 port_type:tcp_socket name_bind;
|
||||||
|
allow $1 self:capability net_bind_service;
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
@ -855,6 +856,7 @@ interface(`corenet_udp_bind_all_ports',`
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 port_type:udp_socket name_bind;
|
allow $1 port_type:udp_socket name_bind;
|
||||||
|
allow $1 self:capability net_bind_service;
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
|
|
||||||
policy_module(corenetwork,1.1.11)
|
policy_module(corenetwork,1.1.12)
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
|
|
Loading…
Reference in New Issue