diff options
Diffstat (limited to 'ipa-server/selinux')
| -rw-r--r-- | ipa-server/selinux/Makefile | 1 | ||||
| -rw-r--r-- | ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te | 2 | ||||
| -rw-r--r-- | ipa-server/selinux/ipa_webgui/ipa_webgui.te | 2 |
3 files changed, 3 insertions, 2 deletions
diff --git a/ipa-server/selinux/Makefile b/ipa-server/selinux/Makefile index 9fb5bbe4..03c3ee30 100644 --- a/ipa-server/selinux/Makefile +++ b/ipa-server/selinux/Makefile @@ -19,6 +19,7 @@ maintainer-clean: clean distclean: clean install: all + install -d $(POLICY_DIR) install -m 644 ipa_webgui/ipa_webgui.pp $(POLICY_DIR) install -m 644 ipa_kpasswd/ipa_kpasswd.pp $(POLICY_DIR) diff --git a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te index 81fbad27..91e756b4 100644 --- a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te +++ b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te @@ -44,7 +44,7 @@ corenet_udp_sendrecv_all_nodes(ipa_kpasswd_t) corenet_raw_sendrecv_all_nodes(ipa_kpasswd_t) corenet_tcp_sendrecv_all_ports(ipa_kpasswd_t) corenet_udp_sendrecv_all_ports(ipa_kpasswd_t) -corenet_all_recvfrom_unlabeled(ipa_kpasswd_t) +corenet_non_ipsec_sendrecv(ipa_kpasswd_t) corenet_tcp_bind_all_nodes(ipa_kpasswd_t) corenet_udp_bind_all_nodes(ipa_kpasswd_t) corenet_tcp_bind_kerberos_admin_port(ipa_kpasswd_t) diff --git a/ipa-server/selinux/ipa_webgui/ipa_webgui.te b/ipa-server/selinux/ipa_webgui/ipa_webgui.te index e2fd6d18..02e20d49 100644 --- a/ipa-server/selinux/ipa_webgui/ipa_webgui.te +++ b/ipa-server/selinux/ipa_webgui/ipa_webgui.te @@ -83,7 +83,7 @@ corenet_udp_sendrecv_all_nodes(ipa_webgui_t) corenet_raw_sendrecv_all_nodes(ipa_webgui_t) corenet_tcp_sendrecv_all_ports(ipa_webgui_t) corenet_udp_sendrecv_all_ports(ipa_webgui_t) -corenet_all_recvfrom_unlabeled(ipa_webgui_t) +corenet_non_ipsec_sendrecv(ipa_webgui_t) corenet_tcp_bind_all_nodes(ipa_webgui_t) corenet_udp_bind_all_nodes(ipa_webgui_t) corenet_tcp_bind_http_cache_port(ipa_webgui_t) |