From c467d98e85276aa3ff53e92bf321877ed7e06381 Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Wed, 28 Jun 2006 14:54:04 +0000
Subject: [PATCH] temporarily add unlabeled packet perm to unlabeled
 association if

---
 refpolicy/policy/modules/kernel/kernel.if | 3 +++
 refpolicy/policy/modules/kernel/kernel.te | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/refpolicy/policy/modules/kernel/kernel.if b/refpolicy/policy/modules/kernel/kernel.if
index 599d8b86..230b6019 100644
--- a/refpolicy/policy/modules/kernel/kernel.if
+++ b/refpolicy/policy/modules/kernel/kernel.if
@@ -2047,6 +2047,9 @@ interface(`kernel_sendrecv_unlabeled_association',`
 	')
 
 	allow $1 unlabeled_t:association { sendto recvfrom };
+
+	# temporary hack until labeling on packets is supported
+	allow $1 unlabeled_t:packet { send recv };
 ')
 
 ########################################
diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te
index b58eb797..8b9d63df 100644
--- a/refpolicy/policy/modules/kernel/kernel.te
+++ b/refpolicy/policy/modules/kernel/kernel.te
@@ -1,5 +1,5 @@
 
-policy_module(kernel,1.3.11)
+policy_module(kernel,1.3.12)
 
 ########################################
 #