| 1 |
commit: a71a8bae341b8d4eb53edc5ad5d070754320a4fc |
| 2 |
Author: Miroslav Grepl <mgrepl <AT> redhat <DOT> com> |
| 3 |
AuthorDate: Tue Jul 19 09:32:07 2011 +0000 |
| 4 |
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Sun Mar 25 09:33:46 2018 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a71a8bae |
| 7 |
|
| 8 |
xtables-multi wants to getattr of the proc fs |
| 9 |
|
| 10 |
policy/modules/system/iptables.te | 1 + |
| 11 |
1 file changed, 1 insertion(+) |
| 12 |
|
| 13 |
diff --git a/policy/modules/system/iptables.te b/policy/modules/system/iptables.te |
| 14 |
index 03abcd6c..50328250 100644 |
| 15 |
--- a/policy/modules/system/iptables.te |
| 16 |
+++ b/policy/modules/system/iptables.te |
| 17 |
@@ -53,6 +53,7 @@ allow iptables_t iptables_tmp_t:dir manage_dir_perms; |
| 18 |
allow iptables_t iptables_tmp_t:file manage_file_perms; |
| 19 |
files_tmp_filetrans(iptables_t, iptables_tmp_t, { file dir }) |
| 20 |
|
| 21 |
+kernel_getattr_proc(iptables_t) |
| 22 |
kernel_request_load_module(iptables_t) |
| 23 |
kernel_read_system_state(iptables_t) |
| 24 |
kernel_read_network_state(iptables_t) |
Archives