From 75c0ff9241e066716ebbb7f2716e7e3bef720e56 Mon Sep 17 00:00:00 2001 From: Michal Ruprich Date: Tue, 8 Aug 2023 10:03:42 +0200 Subject: [PATCH] Resolves: #2215346 - frr policy does not allow the execution of /usr/sbin/ipsec --- frr.spec | 5 ++++- frr.te | 2 ++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/frr.spec b/frr.spec index fc494da..981ae0b 100644 --- a/frr.spec +++ b/frr.spec @@ -7,7 +7,7 @@ Name: frr Version: 8.3.1 -Release: 8%{?checkout}%{?dist} +Release: 9%{?checkout}%{?dist} Summary: Routing daemon License: GPLv2+ URL: http://www.frrouting.org @@ -280,6 +280,9 @@ make check PYTHON=%{__python3} %endif %changelog +* Tue Aug 08 2023 Michal Ruprich - 8.3.1-9 +- Resolves: #2215346 - frr policy does not allow the execution of /usr/sbin/ipsec + * Mon Aug 07 2023 Michal Ruprich - 8.3.1-8 - Resolves: #2216912 - SELinux is preventing FRR-Zebra to access to network namespaces diff --git a/frr.te b/frr.te index bec86d3..9e72b3f 100644 --- a/frr.te +++ b/frr.te @@ -98,6 +98,8 @@ sysnet_exec_ifconfig(frr_t) sysnet_read_ifconfig_run(frr_t) sysnet_watch_ifconfig_run(frr_t) +ipsec_domtrans_mgmt(frr_t) + userdom_read_admin_home_files(frr_t) init_signal(frr_t)