Allow hald to transition to netutils

Block signal via mcs systems

diff --git a/policy/mcs b/policy/mcs
index ebe5833b795155bd4a2d09db61d3baeb4c873a11..fbd2c40769772e91c972b8f926274d47d44b32e7 100644 (file)
--- a/policy/mcs
+++ b/policy/mcs
@@ -98,7 +98,7 @@ mlsconstrain process { transition dyntransition }
 mlsconstrain process { ptrace }
        (( h1 dom h2) or ( t1 == mcsptraceall ));
 
-mlsconstrain process { sigkill sigstop }
+mlsconstrain process { signal sigkill sigstop }
        (( h1 dom h2 ) or ( t1 == mcskillall ));
 
 #

diff --git a/policy/modules/services/hal.te b/policy/modules/services/hal.te
index 0a54d67d332e70add90f493c1e92360882d12b82..188cd753704fd1567d71bf2cfdfc8f874cd79541 100644 (file)
--- a/policy/modules/services/hal.te
+++ b/policy/modules/services/hal.te
@@ -226,6 +226,8 @@ sysnet_signal_dhcpc(hald_t)
 userdom_dontaudit_use_unpriv_user_fds(hald_t)
 userdom_dontaudit_search_user_home_dirs(hald_t)
 
+netutils_domtrans(hald_t)
+
 optional_policy(`
        alsa_domtrans(hald_t)
        alsa_read_rw_config(hald_t)