commit: d797c3eae29994e49f35aeb52d15926561172347 Author: Jason Zaman <jason <AT> perfinion <DOT> com> AuthorDate: Wed Aug 20 16:26:29 2014 +0000 Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com> CommitDate: Wed Aug 20 16:26:29 2014 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d797c3ea
Allow udev udev to set predictable ifnames Udev sets the interface names predictably, it uses a netlink_route_socket to do so. more info at: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ --- policy/modules/system/udev.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 83a8b11..94adb3b 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -331,6 +331,7 @@ ifdef(`distro_gentoo',` # allow udev_t self:capability2 block_suspend; allow udev_t udev_tbl_t:dir relabelto; + allow udev_t self:netlink_route_socket rw_netlink_socket_perms; manage_dirs_pattern(udev_t, udev_tbl_t, udev_tbl_t) manage_files_pattern(udev_t, udev_tbl_t, udev_tbl_t)
