[selinux-policy: 1476/3172] packets from configuring cups from a web browser and printing a test page to a jetdirect

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 21:12:56 UTC 2010


commit 8745d93c9972d777d3bc04efa7eaa73858b1f9f1
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Thu May 25 18:41:14 2006 +0000

    packets from configuring cups from a web browser and printing a test page to a jetdirect

 refpolicy/policy/modules/services/cups.te |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)
---
diff --git a/refpolicy/policy/modules/services/cups.te b/refpolicy/policy/modules/services/cups.te
index 2d6173f..14a9d2c 100644
--- a/refpolicy/policy/modules/services/cups.te
+++ b/refpolicy/policy/modules/services/cups.te
@@ -128,15 +128,13 @@ kernel_read_network_state(cupsd_t)
 kernel_read_all_sysctls(cupsd_t)
 kernel_tcp_recvfrom(cupsd_t)
 
+corenet_non_ipsec_sendrecv(cupsd_t)
 corenet_tcp_sendrecv_all_if(cupsd_t)
 corenet_udp_sendrecv_all_if(cupsd_t)
-corenet_raw_sendrecv_all_if(cupsd_t)
 corenet_tcp_sendrecv_all_nodes(cupsd_t)
 corenet_udp_sendrecv_all_nodes(cupsd_t)
-corenet_raw_sendrecv_all_nodes(cupsd_t)
 corenet_tcp_sendrecv_all_ports(cupsd_t)
 corenet_udp_sendrecv_all_ports(cupsd_t)
-corenet_non_ipsec_sendrecv(cupsd_t)
 corenet_tcp_bind_all_nodes(cupsd_t)
 corenet_udp_bind_all_nodes(cupsd_t)
 corenet_tcp_bind_ipp_port(cupsd_t)
@@ -145,6 +143,8 @@ corenet_tcp_bind_reserved_port(cupsd_t)
 corenet_dontaudit_tcp_bind_all_reserved_ports(cupsd_t)
 corenet_tcp_connect_all_ports(cupsd_t)
 corenet_sendrecv_hplip_client_packets(cupsd_t)
+corenet_sendrecv_ipp_client_packets(cupsd_t)
+corenet_sendrecv_ipp_server_packets(cupsd_t)
 
 dev_rw_printer(cupsd_t)
 dev_read_urand(cupsd_t)


More information about the scm-commits mailing list