Gentoo Archives: gentoo-commits

From: Sven Vermeulen <swift@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Sun, 29 Dec 2013 15:24:56
Message-Id: 1388330568.a9333123e9697f2281b2d3023784e18760cad9c0.swift@gentoo
1 commit: a9333123e9697f2281b2d3023784e18760cad9c0
2 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
3 AuthorDate: Sun Dec 29 15:22:48 2013 +0000
4 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
5 CommitDate: Sun Dec 29 15:22:48 2013 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=a9333123
7
8 Fix bug #468878 - Allow pump DHCP client to work
9
10 ---
11 policy/modules/system/sysnetwork.te | 4 ++++
12 1 file changed, 4 insertions(+)
13
14 diff --git a/policy/modules/system/sysnetwork.te b/policy/modules/system/sysnetwork.te
15 index 021c8ca..bfd9435 100644
16 --- a/policy/modules/system/sysnetwork.te
17 +++ b/policy/modules/system/sysnetwork.te
18 @@ -402,4 +402,8 @@ ifdef(`distro_gentoo',`
19 # Allow dhcpc to set hostname (/proc/sys/kernel/hostname)
20 allow dhcpc_t self:capability sys_admin;
21 kernel_rw_kernel_sysctl(dhcpc_t)
22 +
23 + # Fixes bug 468878
24 + files_pid_filetrans(dhcpc_t, dhcpc_var_run_t, sock_file)
25 + allow dhcpc_t self:unix_stream_socket { create_stream_socket_perms connectto };
26 ')