aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGuido Trentalancia <guido@trentalancia.com>2024-08-27 14:32:27 +0200
committerJason Zaman <perfinion@gentoo.org>2024-09-21 15:28:29 -0700
commite4ae4c90feab6fb352afae63272070e3173f8f12 (patch)
treedbf2c8c9d7d611fd83e80352cb67cf761e8fdf23
parentbluetooth: Move line. (diff)
downloadhardened-refpolicy-e4ae4c90feab6fb352afae63272070e3173f8f12.tar.gz
hardened-refpolicy-e4ae4c90feab6fb352afae63272070e3173f8f12.tar.bz2
hardened-refpolicy-e4ae4c90feab6fb352afae63272070e3173f8f12.zip
Allow interactive user terminal output for the NetLabel management tool.
Signed-off-by: Guido Trentalancia <guido@trentalancia.com> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
-rw-r--r--policy/modules/system/netlabel.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/system/netlabel.te b/policy/modules/system/netlabel.te
index fd64669d..319c89ac 100644
--- a/policy/modules/system/netlabel.te
+++ b/policy/modules/system/netlabel.te
@@ -22,6 +22,8 @@ allow netlabel_mgmt_t self:netlink_generic_socket create_socket_perms;
kernel_read_network_state(netlabel_mgmt_t)
+domain_use_interactive_fds(netlabel_mgmt_t)
+
files_read_etc_files(netlabel_mgmt_t)
seutil_use_newrole_fds(netlabel_mgmt_t)