commit: b3f7bbec02352eb175391b51119180bad035b096 Author: Jonathan Davies <jpds <AT> protonmail <DOT> com> AuthorDate: Tue Nov 17 15:58:31 2020 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sun Nov 29 01:32:30 2020 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b3f7bbec
portage.te: Allow portage_fetch_t to read /dev/urandom through interface. Closes: https://github.com/perfinion/hardened-refpolicy/pull/3 Signed-off-by: Jonathan Davies <jpds <AT> protonmail.com> Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> policy/modules/admin/portage.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te index c0d6cace..8e9865e2 100644 --- a/policy/modules/admin/portage.te +++ b/policy/modules/admin/portage.te @@ -303,6 +303,7 @@ corenet_udp_bind_generic_node(portage_fetch_t) corenet_udp_bind_all_unreserved_ports(portage_fetch_t) dev_read_rand(portage_fetch_t) +dev_read_urand(portage_fetch_t) domain_use_interactive_fds(portage_fetch_t)
