[selinux-policy: 2431/3172] Various abrt fixes.

[Daniel J Walsh]

commit cd17345324c4e166c1a26f9baeab2d9e67e330d6
Author: Dominick Grift <domg472 at gmail.com>
Date:   Wed Feb 24 12:35:58 2010 +0100

    Various abrt fixes.
    
    Fix networking compatibility.
    Allow domains to search bin to enable run abrt executables.
    
    Signed-off-by: Dominick Grift <domg472 at gmail.com>
    Signed-off-by: Chris PeBenito <cpebenito at tresys.com>

 policy/modules/services/abrt.if |    1 +
 policy/modules/services/abrt.te |    7 +++++++
 2 files changed, 8 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/services/abrt.if b/policy/modules/services/abrt.if
index e9ed246..b2b1657 100644
--- a/policy/modules/services/abrt.if
+++ b/policy/modules/services/abrt.if
@@ -34,6 +34,7 @@ interface(`abrt_exec',`
 		type abrt_exec_t;
 	')
 
+	corecmd_search_bin($1)
 	can_exec($1, abrt_exec_t)
 ')
 
diff --git a/policy/modules/services/abrt.te b/policy/modules/services/abrt.te
index 559ce2d..0099ed3 100644
--- a/policy/modules/services/abrt.te
+++ b/policy/modules/services/abrt.te
@@ -76,7 +76,14 @@ kernel_rw_kernel_sysctl(abrt_t)
 corecmd_exec_bin(abrt_t)
 corecmd_exec_shell(abrt_t)
 
+corenet_all_recvfrom_netlabel(abrt_t)
+corenet_all_recvfrom_unlabeled(abrt_t)
+corenet_sendrecv_http_client_packets(abrt_t)
+corenet_tcp_bind_generic_node(abrt_t)
 corenet_tcp_connect_http_port(abrt_t)
+corenet_tcp_sendrecv_generic_if(abrt_t)
+corenet_tcp_sendrecv_generic_node(abrt_t)
+corenet_tcp_sendrecv_generic_port(abrt_t)
 
 dev_read_urand(abrt_t)