[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/

[Jason Zaman]

commit:     2509630e0353e15b70bd82f8d1bb1eb65b383aef
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Thu Nov  2 17:31:20 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Nov  5 06:40:35 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=2509630e

rpc: Allow stream connect to gssproxy

 policy/modules/contrib/rpc.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/contrib/rpc.te b/policy/modules/contrib/rpc.te
index 9fcbce2f..85a68b23 100644
--- a/policy/modules/contrib/rpc.te
+++ b/policy/modules/contrib/rpc.te
@@ -339,6 +339,9 @@ optional_policy(`
 ')
 
 optional_policy(`
+       gssproxy_stream_connect(gssd_t)
+')
+optional_policy(`
        kerberos_manage_host_rcache(gssd_t)
        kerberos_read_keytab(gssd_t)
        kerberos_tmp_filetrans_host_rcache(gssd_t, file, "nfs_0")