From b270542863eb5d9fec2b9c66f700ae54dd1584a9 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Thu, 14 Oct 2010 14:42:30 -0400
Subject: Grant /usr/sbin/ipa_kpasswd "name_bind" access.

Requires selinux-policy-3.6.32-123 on F12
Requires selinux-policy-3.7.19-40 on F13

ticket 73
---
 selinux/ipa_kpasswd/ipa_kpasswd.te | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'selinux')

diff --git a/selinux/ipa_kpasswd/ipa_kpasswd.te b/selinux/ipa_kpasswd/ipa_kpasswd.te
index b5203a4ef..07312ce98 100644
--- a/selinux/ipa_kpasswd/ipa_kpasswd.te
+++ b/selinux/ipa_kpasswd/ipa_kpasswd.te
@@ -69,3 +69,11 @@ require {
 };
 
 allow ipa_kpasswd_t krb5kdc_conf_t:dir search_dir_perms;
+
+optional_policy(`
+    gen_require(`
+             type kerberos_password_port_t;
+    ')
+    corenet_tcp_bind_kerberos_password_port(ipa_kpasswd_t)
+')
+
-- 
cgit