commit: ecf21a2dc57dd85fe6065a1bb2996a72daa6ca78 Author: Laurent Bigonville <bigon <AT> bigon <DOT> be> AuthorDate: Thu Nov 1 10:12:26 2018 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sun Nov 18 10:56:47 2018 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=ecf21a2d
irqbalance now creates an abstract socket Signed-off-by: Jason Zaman <jason <AT> perfinion.com> policy/modules/services/irqbalance.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/irqbalance.te b/policy/modules/services/irqbalance.te index a71058d8..ade99be0 100644 --- a/policy/modules/services/irqbalance.te +++ b/policy/modules/services/irqbalance.te @@ -28,6 +28,7 @@ allow irqbalance_t self:capability { setpcap }; dontaudit irqbalance_t self:capability sys_tty_config; allow irqbalance_t self:process { getcap getsched setcap signal_perms }; allow irqbalance_t self:udp_socket create_socket_perms; +allow irqbalance_t self:unix_stream_socket create_stream_socket_perms; manage_files_pattern(irqbalance_t, irqbalance_pid_t, irqbalance_pid_t) files_pid_filetrans(irqbalance_t, irqbalance_pid_t, file)