[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

[Sven Vermeulen]

commit:     b159698992463638f2fd801f987f2d8a2f1b6012
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Wed Aug 13 16:36:10 2014 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Wed Aug 13 16:36:10 2014 +0000
URL:        
http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=b1596989

Allow dhcpc to create and manage control sockets

---
 policy/modules/system/sysnetwork.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/system/sysnetwork.te 
b/policy/modules/system/sysnetwork.te
index 35ca66f..cb0922d 100644
--- a/policy/modules/system/sysnetwork.te
+++ b/policy/modules/system/sysnetwork.te
@@ -399,6 +399,9 @@ ifdef(`distro_gentoo',`
        # Fixes bug 468874
        allow dhcpc_t self:rawip_socket create_socket_perms;
 
+       # Allow dhcpcd to set its control sockets
+       allow dhcpc_t dhcpc_var_run_t:sock_file manage_sock_file_perms;
+
        # Allow dhcpc to set hostname (/proc/sys/kernel/hostname)
        allow dhcpc_t self:capability sys_admin;
        kernel_rw_kernel_sysctl(dhcpc_t)