commit: 409aefdf3b059a86e9d43440085b111817e835ba Author: Laurent Bigonville <bigon <AT> bigon <DOT> be> AuthorDate: Fri Feb 5 00:14:30 2016 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Fri Feb 12 03:15:07 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=409aefdf
Add label for /sbin/ipset policy/modules/system/iptables.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/iptables.fc b/policy/modules/system/iptables.fc index b3eda3e..e6d5258 100644 --- a/policy/modules/system/iptables.fc +++ b/policy/modules/system/iptables.fc @@ -6,6 +6,7 @@ /sbin/ebtables -- gen_context(system_u:object_r:iptables_exec_t,s0) /sbin/ebtables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0) /sbin/ipchains.* -- gen_context(system_u:object_r:iptables_exec_t,s0) +/sbin/ipset -- gen_context(system_u:object_r:iptables_exec_t,s0) /sbin/ip6?tables -- gen_context(system_u:object_r:iptables_exec_t,s0) /sbin/ip6?tables-restore -- gen_context(system_u:object_r:iptables_exec_t,s0) /sbin/ip6?tables-multi -- gen_context(system_u:object_r:iptables_exec_t,s0)
