From 79df2465a78478efbe0318f1ab8cf8114204826d Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Wed, 2 Jul 2008 17:55:18 -0400 Subject: After the rework of the code that binds to specific interfaces to correctly support multihomed server, we need to add a couple of SELinux lines to the policy file. (lines suggested by Dan Walsh) --- ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te index 55e65cc3..b5203a4e 100644 --- a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te +++ b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te @@ -48,6 +48,9 @@ manage_dirs_pattern(ipa_kpasswd_t, ipa_kpasswd_ccache_t, ipa_kpasswd_ccache_t) manage_files_pattern(ipa_kpasswd_t, ipa_kpasswd_ccache_t, ipa_kpasswd_ccache_t) files_var_filetrans(ipa_kpasswd_t, ipa_kpasswd_ccache_t,dir) +kernel_read_network_state(ipa_kpasswd_t) +kernel_read_network_state_symlinks(ipa_kpasswd_t) + corenet_tcp_sendrecv_all_if(ipa_kpasswd_t) corenet_udp_sendrecv_all_if(ipa_kpasswd_t) corenet_raw_sendrecv_all_if(ipa_kpasswd_t) -- cgit