Allow swat_t to connect and read/write nmbd_t sock_file

diff --git a/policy/modules/services/samba.te b/policy/modules/services/samba.te
index bac0112b41593f479b90a2f98302d1f500aa5cdc..5d2dfe7910ea05035d2966aa5f9cc46cd7bca43b 100644 (file)
--- a/policy/modules/services/samba.te
+++ b/policy/modules/services/samba.te
@@ -696,6 +696,7 @@ allow swat_t nmbd_t:process { signal signull };
 allow nmbd_t swat_t:process signal;
 
 read_files_pattern(swat_t, nmbd_var_run_t, nmbd_var_run_t)
+stream_connect_pattern(swat_t, nmbd_var_run_t, nmbd_var_run_t, nmbd_t)
 
 allow swat_t smbd_port_t:tcp_socket name_bind;