From 574e63fabc1fd2a9ad1dfdf68643e269f4bde6f2 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 29 Nov 2005 15:36:53 +0000 Subject: [PATCH] fix kerberos_use, which turned out to be a problem in dns_reslove --- refpolicy/policy/modules/services/radius.te | 1 + refpolicy/policy/modules/system/sysnetwork.if | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/refpolicy/policy/modules/services/radius.te b/refpolicy/policy/modules/services/radius.te index cb797906..66574c4c 100644 --- a/refpolicy/policy/modules/services/radius.te +++ b/refpolicy/policy/modules/services/radius.te @@ -73,6 +73,7 @@ fs_search_auto_mountpoints(radiusd_t) term_dontaudit_use_console(radiusd_t) auth_read_shadow(radiusd_t) +auth_domtrans_chk_passwd(radiusd_t) corecmd_exec_bin(radiusd_t) corecmd_exec_shell(radiusd_t) diff --git a/refpolicy/policy/modules/system/sysnetwork.if b/refpolicy/policy/modules/system/sysnetwork.if index 42f145b7..386661ce 100644 --- a/refpolicy/policy/modules/system/sysnetwork.if +++ b/refpolicy/policy/modules/system/sysnetwork.if @@ -419,7 +419,7 @@ interface(`sysnet_dns_name_resolve',` corenet_tcp_sendrecv_all_nodes($1) corenet_udp_sendrecv_all_nodes($1) corenet_raw_sendrecv_all_nodes($1) - corenet_tcp_sendrecv_all_ports($1) + corenet_tcp_sendrecv_dns_port($1) corenet_udp_sendrecv_dns_port($1) corenet_tcp_bind_all_nodes($1) corenet_udp_bind_all_nodes($1)