From: Miroslav Grepl Date: Tue, 19 Jul 2011 09:32:07 +0000 (+0000) Subject: xtables-multi wants to getattr of the proc fs X-Git-Tag: 000~684^2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=44b54263222b85a9968edb871e37a26e1c312556;p=people%2Fstevee%2Fselinux-policy.git xtables-multi wants to getattr of the proc fs --- diff --git a/policy/modules/system/iptables.te b/policy/modules/system/iptables.te index a7b2adc5..d6a93ac3 100644 --- a/policy/modules/system/iptables.te +++ b/policy/modules/system/iptables.te @@ -43,6 +43,7 @@ allow iptables_t iptables_tmp_t:dir manage_dir_perms; allow iptables_t iptables_tmp_t:file manage_file_perms; files_tmp_filetrans(iptables_t, iptables_tmp_t, { file dir }) +kernel_getattr_proc(iptables_t) kernel_request_load_module(iptables_t) kernel_read_system_state(iptables_t) kernel_read_network_state(iptables_t)