diff --git a/policy/modules/system/authlogin.if b/policy/modules/system/authlogin.if index 8d1d529f..8a89f592 100644 --- a/policy/modules/system/authlogin.if +++ b/policy/modules/system/authlogin.if @@ -1378,8 +1378,6 @@ interface(`auth_manage_login_records',` # interface(`auth_use_nsswitch',` - allow $1 self:netlink_route_socket r_netlink_socket_perms; - files_list_var_lib($1) # read /etc/nsswitch.conf diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te index bd629c2e..b8838979 100644 --- a/policy/modules/system/authlogin.te +++ b/policy/modules/system/authlogin.te @@ -1,5 +1,5 @@ -policy_module(authlogin, 2.1.0) +policy_module(authlogin, 2.1.1) ######################################## # diff --git a/policy/modules/system/sysnetwork.if b/policy/modules/system/sysnetwork.if index a0cd508a..43fc19b2 100644 --- a/policy/modules/system/sysnetwork.if +++ b/policy/modules/system/sysnetwork.if @@ -543,6 +543,7 @@ interface(`sysnet_dns_name_resolve',` allow $1 self:tcp_socket create_socket_perms; allow $1 self:udp_socket create_socket_perms; + allow $1 self:netlink_route_socket r_netlink_socket_perms; corenet_all_recvfrom_unlabeled($1) corenet_all_recvfrom_netlabel($1) diff --git a/policy/modules/system/sysnetwork.te b/policy/modules/system/sysnetwork.te index ab083b90..90e8bc79 100644 --- a/policy/modules/system/sysnetwork.te +++ b/policy/modules/system/sysnetwork.te @@ -1,5 +1,5 @@ -policy_module(sysnetwork, 1.10.1) +policy_module(sysnetwork, 1.10.2) ######################################## #