commit: a71a8bae341b8d4eb53edc5ad5d070754320a4fc
Author: Miroslav Grepl <mgrepl <AT> redhat <DOT> com>
AuthorDate: Tue Jul 19 09:32:07 2011 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Sun Mar 25 09:33:46 2018 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a71a8bae
xtables-multi wants to getattr of the proc fs
policy/modules/system/iptables.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/iptables.te
b/policy/modules/system/iptables.te
index 03abcd6c..50328250 100644
--- a/policy/modules/system/iptables.te
+++ b/policy/modules/system/iptables.te
@@ -53,6 +53,7 @@ allow iptables_t iptables_tmp_t:dir manage_dir_perms;
allow iptables_t iptables_tmp_t:file manage_file_perms;
files_tmp_filetrans(iptables_t, iptables_tmp_t, { file dir })
+kernel_getattr_proc(iptables_t)
kernel_request_load_module(iptables_t)
kernel_read_system_state(iptables_t)
kernel_read_network_state(iptables_t)
