Zebra patch from Dan Walsh.
This commit is contained in:
parent
bc31d12725
commit
bed0a44560
@ -24,7 +24,27 @@ interface(`zebra_read_config',`
|
||||
|
||||
########################################
|
||||
## <summary>
|
||||
## All of the rules required to administrate
|
||||
## Connect to zebra over an unix stream socket.
|
||||
## </summary>
|
||||
## <param name="domain">
|
||||
## <summary>
|
||||
## Domain allowed access.
|
||||
## </summary>
|
||||
## </param>
|
||||
#
|
||||
interface(`zebra_stream_connect',`
|
||||
gen_require(`
|
||||
type zebra_t, zebra_var_run_t;
|
||||
')
|
||||
|
||||
files_search_pids($1)
|
||||
allow $1 zebra_var_run_t:sock_file write;
|
||||
allow $1 zebra_t:unix_stream_socket connectto;
|
||||
')
|
||||
|
||||
########################################
|
||||
## <summary>
|
||||
## All of the rules required to administrate
|
||||
## an zebra environment
|
||||
## </summary>
|
||||
## <param name="domain">
|
||||
|
@ -1,5 +1,5 @@
|
||||
|
||||
policy_module(zebra, 1.10.0)
|
||||
policy_module(zebra, 1.10.1)
|
||||
|
||||
########################################
|
||||
#
|
||||
|
Loading…
Reference in New Issue
Block a user