selinux-policy/Fix-userdom_admin_user_template-interface-by-adding-.patch
2019-09-30 11:16:49 -04:00

29 lines
1.0 KiB
Diff

From a207f43eacab87fc54a175b8dd2db68ca231e965 Mon Sep 17 00:00:00 2001
From: Lukas Vrabec <lvrabec@redhat.com>
Date: Thu, 24 Jan 2019 16:46:39 +0100
Subject: [PATCH 064/109] Fix userdom_admin_user_template() interface by adding
bluetooth,alg,dccp create_stream_socket permissions.
---
policy/modules/system/userdomain.if | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 5059b4a21..8b9abecbd 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1582,8 +1582,8 @@ template(`userdom_admin_user_template',`
allow $1_t self:passwd crontab;
allow $1_t self:bluetooth_socket create_stream_socket_perms;
- allow $1_t self:alg_socket create_socket_perms;
- allow $1_t self:dccp_socket create_socket_perms;
+ allow $1_t self:alg_socket create_stream_socket_perms;
+ allow $1_t self:dccp_socket create_stream_socket_perms;
allow $1_t self:cap_userns sys_ptrace;
--
2.19.1