rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

allow iptables to relabelto all packets

Browse Source
This commit is contained in:
Chris PeBenito 2006-05-23 19:07:22 +00:00
parent e37158e6b9
commit 6293baeacc
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
refpolicy/policy/modules/kernel/corenetwork.if.m4
View File

@ -466,7 +466,7 @@ define(`create_packet_interfaces',``
# #
interface(`corenet_send_$1_packets',` interface(`corenet_send_$1_packets',`
gen_require(` gen_require(`
type $1_t; type $1_packet_t;
') ')
allow dollarsone $1_packet_t:packet send; allow dollarsone $1_packet_t:packet send;
@ -485,7 +485,7 @@ interface(`corenet_send_$1_packets',`
# #
interface(`corenet_receive_$1_packets',` interface(`corenet_receive_$1_packets',`
gen_require(` gen_require(`
type $1_t; type $1_packet_t;
') ')
allow dollarsone $1_packet_t:packet recv; allow dollarsone $1_packet_t:packet recv;
@ -519,7 +519,7 @@ interface(`corenet_sendrecv_$1_packets',`
# #
interface(`corenet_relabelto_$1_packets',` interface(`corenet_relabelto_$1_packets',`
gen_require(` gen_require(`
type $1_t; type $1_packet_t;
') ')
allow dollarsone $1_packet_t:packet relabelto; allow dollarsone $1_packet_t:packet relabelto;

2
refpolicy/policy/modules/system/iptables.te
View File

@ -43,6 +43,8 @@ kernel_read_kernel_sysctls(iptables_t)
kernel_read_modprobe_sysctls(iptables_t) kernel_read_modprobe_sysctls(iptables_t)
kernel_use_fds(iptables_t) kernel_use_fds(iptables_t)
corenet_relabelto_all_packets(iptables_t)
dev_read_sysfs(iptables_t) dev_read_sysfs(iptables_t)
fs_getattr_xattr_fs(iptables_t) fs_getattr_xattr_fs(iptables_t)

1
refpolicy/policy/modules/system/sysnetwork.te
View File

@ -153,7 +153,6 @@ ifdef(`distro_redhat', `
ifdef(`targeted_policy', ` ifdef(`targeted_policy', `
term_dontaudit_use_unallocated_ttys(dhcpc_t) term_dontaudit_use_unallocated_ttys(dhcpc_t)
term_dontaudit_use_generic_ptys(dhcpc_t) term_dontaudit_use_generic_ptys(dhcpc_t)
files_dontaudit_read_root_files(dhcpc_t) files_dontaudit_read_root_files(dhcpc_t)
') ')