rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Fail2ban patch from Dan Walsh.

Browse Source
This commit is contained in:
Chris PeBenito 2009-12-18 10:39:10 -05:00
parent bd21cb1e09
commit ce8a71a960
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/fail2ban.te
View File

@ -1,5 +1,5 @@
policy_module(fail2ban, 1.3.0) policy_module(fail2ban, 1.3.1)
######################################## ########################################
# #
@ -33,6 +33,7 @@ allow fail2ban_t self:capability { sys_tty_config };
allow fail2ban_t self:process signal; allow fail2ban_t self:process signal;
allow fail2ban_t self:fifo_file rw_fifo_file_perms; allow fail2ban_t self:fifo_file rw_fifo_file_perms;
allow fail2ban_t self:unix_stream_socket { connectto create_stream_socket_perms }; allow fail2ban_t self:unix_stream_socket { connectto create_stream_socket_perms };
allow fail2ban_t self:unix_dgram_socket create_socket_perms;
allow fail2ban_t self:tcp_socket create_stream_socket_perms; allow fail2ban_t self:tcp_socket create_stream_socket_perms;
# log files # log files
@ -79,6 +80,7 @@ fs_getattr_all_fs(fail2ban_t)
auth_use_nsswitch(fail2ban_t) auth_use_nsswitch(fail2ban_t)
logging_read_all_logs(fail2ban_t) logging_read_all_logs(fail2ban_t)
logging_send_syslog_msg(fail2ban_t)
miscfiles_read_localization(fail2ban_t) miscfiles_read_localization(fail2ban_t)