commit: 9660ec3c7e65d654770832d9011cce2eb7bc1134 Author: Jason Zaman <jason <AT> perfinion <DOT> com> AuthorDate: Wed Aug 20 16:26:29 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Wed Aug 20 17:10:23 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=9660ec3c
Allow udev udev to set predictable ifnames Udev sets the interface names predictably, it uses a netlink_route_socket to do so. more info at: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ --- policy/modules/system/udev.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 83a8b11..737e854 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -332,6 +332,9 @@ ifdef(`distro_gentoo',` allow udev_t self:capability2 block_suspend; allow udev_t udev_tbl_t:dir relabelto; + # needed for predictable network interfaces naming + allow udev_t self:netlink_route_socket rw_netlink_socket_perms; + manage_dirs_pattern(udev_t, udev_tbl_t, udev_tbl_t) manage_files_pattern(udev_t, udev_tbl_t, udev_tbl_t) manage_lnk_files_pattern(udev_t, udev_tbl_t, udev_tbl_t)
