diff options
| author |   Jason Zaman <jason@perfinion.com> | 2017-05-26 23:57:59 +0800 |
|---|---|---|
| committer | Jason Zaman <jason@perfinion.com> | 2017-06-06 01:16:18 +0800 |
| commit | 9e3ce22d7df35dfa009df551d42dfa449df3c311 (patch) | |
| tree | 791b52d356464cfc1de5ea90a62bb39af1128ef8 | |
| parent | dirmngr: fcontext for ~/.gnupg/crls.d/ (diff) | |
| download | hardened-refpolicy-9e3ce22d.tar.gz hardened-refpolicy-9e3ce22d.tar.bz2 hardened-refpolicy-9e3ce22d.zip | |
dirmngr: Network rules to connect to keyserver
type=AVC msg=audit(1494163667.921:24917): avc: denied { name_bind } for pid=15683 comm=636F6E6E2066643D36 src=19321 scontext=staff_u:staff_r:dirmngr_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket permissive=0
| -rw-r--r-- | policy/modules/contrib/dirmngr.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/policy/modules/contrib/dirmngr.te b/policy/modules/contrib/dirmngr.te index 17cce56a8..4cec7fcdd 100644 --- a/policy/modules/contrib/dirmngr.te +++ b/policy/modules/contrib/dirmngr.te @@ -62,6 +62,10 @@ manage_sock_files_pattern(dirmngr_t, dirmngr_var_run_t, dirmngr_var_run_t) files_pid_filetrans(dirmngr_t, dirmngr_var_run_t, { dir file }) kernel_read_crypto_sysctls(dirmngr_t) +dev_read_rand(dirmngr_t) +sysnet_dns_name_resolve(dirmngr_t) + +corenet_tcp_connect_pgpkeyserver_port(dirmngr_t) files_read_etc_files(dirmngr_t) |