Allow squid to check the network state

diff --git a/policy/modules/services/squid.te b/policy/modules/services/squid.te
index 950e65a5f1396f65aa2f812de9a51f1075b8e862..7b3d2db9f76e4a54724295731ae63f05ef78200c 100644 (file)
--- a/policy/modules/services/squid.te
+++ b/policy/modules/services/squid.te
@@ -90,6 +90,7 @@ files_pid_filetrans(squid_t, squid_var_run_t, file)
 
 kernel_read_kernel_sysctls(squid_t)
 kernel_read_system_state(squid_t)
+kernel_read_network_state(squid_t)
 
 files_dontaudit_getattr_boot_dirs(squid_t)