Allow fail2ban to manage /etc/deny.hosts

diff --git a/policy/modules/services/fail2ban.te b/policy/modules/services/fail2ban.te
index 2599f96c4a7140aec1e20705e3b5018488240440..c7a0911bec6a867da98b0e8c72498fe83bc374a8 100644 (file)
--- a/policy/modules/services/fail2ban.te
+++ b/policy/modules/services/fail2ban.te
@@ -98,6 +98,9 @@ miscfiles_read_localization(fail2ban_t)
 
 mta_send_mail(fail2ban_t)
 
+sysnet_manage_config(fail2ban_t)
+sysnet_filetrans_named_content(fail2ban_t)
+
 optional_policy(`
        apache_read_log(fail2ban_t)
 ')