[selinux-policy/master_contrib: 47/47] Allow dsspam to listen on own tpc_socket
Miroslav Grepl
mgrepl at fedoraproject.org
Wed Jan 16 13:34:28 UTC 2013
commit b84da124585a1fb16b530223840405fa2d9186d3
Author: Miroslav Grepl <mgrepl at redhat.com>
Date: Wed Jan 16 14:14:39 2013 +0100
Allow dsspam to listen on own tpc_socket
Conflicts:
dspam.te
dspam.te | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/dspam.te b/dspam.te
index dbbe097..d606e12 100644
--- a/dspam.te
+++ b/dspam.te
@@ -28,6 +28,9 @@ files_pid_file(dspam_var_run_t)
allow dspam_t self:capability net_admin;
allow dspam_t self:process signal;
+
+allow dspam_t self:tcp_socket { listen accept };
+
allow dspam_t self:fifo_file rw_fifo_file_perms;
allow dspam_t self:unix_stream_socket { accept listen };
More information about the scm-commits
mailing list