Fail2ban patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2009-12-18 10:39:10 -05:00
parent bd21cb1e09
commit ce8a71a960

View File

@ -1,5 +1,5 @@
policy_module(fail2ban, 1.3.0)
policy_module(fail2ban, 1.3.1)
########################################
#
@ -33,6 +33,7 @@ allow fail2ban_t self:capability { sys_tty_config };
allow fail2ban_t self:process signal;
allow fail2ban_t self:fifo_file rw_fifo_file_perms;
allow fail2ban_t self:unix_stream_socket { connectto create_stream_socket_perms };
allow fail2ban_t self:unix_dgram_socket create_socket_perms;
allow fail2ban_t self:tcp_socket create_stream_socket_perms;
# log files
@ -79,6 +80,7 @@ fs_getattr_all_fs(fail2ban_t)
auth_use_nsswitch(fail2ban_t)
logging_read_all_logs(fail2ban_t)
logging_send_syslog_msg(fail2ban_t)
miscfiles_read_localization(fail2ban_t)