Label port 5546 as dhcpc_port_t and allow dhcpc_t to bind to TCP for client control
PATCH 1/1 Label port 5546 as dhcpc_port_t and allow dhcpc_t to bind to TCP for client control
From: Russell Coker <[email protected]>
Client control is used by the wide dhcp6 client, which can be controlled via dhcp6ctl. This works by communicating over port 5546.
--- policy/modules/kernel/corenetwork.te.in | 2 +- policy/modules/system/sysnetwork.te | 1 + 2 files changed, 2 insertions(+), 1 deletion(-)
policy/modules/kernel/corenetwork.te.in +1 -1
@@ -115,7 +115,7 @@ network_port(daap, tcp,3689,s0, udp,3689,s0) network_port(dbskkd, tcp,1178,s0) network_port(dcc, udp,6276,s0, udp,6277,s0) network_port(dccm, tcp,5679,s0, udp,5679,s0) -network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0) +network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0, udp,5546,s0, tcp,5546,s0) network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0, tcp,647,s0, udp,647,s0, tcp,847,s0, udp,847,s0, tcp,7911,s0) network_port(dict, tcp,2628,s0) network_port(distccd, tcp,3632,s0)
policy/modules/system/sysnetwork.te +1 -0
@@ -103,6 +103,7 @@ corenet_tcp_sendrecv_all_ports(dhcpc_t) corenet_udp_sendrecv_all_ports(dhcpc_t) corenet_tcp_bind_all_nodes(dhcpc_t) corenet_udp_bind_all_nodes(dhcpc_t) +corenet_tcp_bind_dhcpc_port(dhcpc_t) corenet_udp_bind_dhcpc_port(dhcpc_t) corenet_tcp_connect_all_ports(dhcpc_t) corenet_sendrecv_dhcpd_client_packets(dhcpc_t)
Signature · 1 line
1.7.10.4
PATCH 1/1 Label port 5546 as dhcpc_port_t and allow dhcpc_t to bind to TCP for client control
Quoted 27 lines · Mika Pfl?ger
From: Russell Coker <[email protected]>
Client control is used by the wide dhcp6 client, which can be controlled via dhcp6ctl. This works by communicating over port 5546.
--- policy/modules/kernel/corenetwork.te.in | 2 +- policy/modules/system/sysnetwork.te | 1 + 2 files changed, 2 insertions(+), 1 deletion(-)policy/modules/kernel/corenetwork.te.in +1
-1@@ -115,7 +115,7 @@ network_port(daap, tcp,3689,s0, udp,3689,s0) network_port(dbskkd, tcp,1178,s0) network_port(dcc, udp,6276,s0, udp,6277,s0) network_port(dccm, tcp,5679,s0, udp,5679,s0) -network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0) +network_port(dhcpc, udp,68,s0, tcp,68,s0, udp,546,s0, tcp, 546,s0, udp,5546,s0, tcp,5546,s0) network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0, tcp,647,s0, udp,647,s0, tcp,847,s0, udp,847,s0, tcp,7911,s0) network_port(dict, tcp,2628,s0) network_port(distccd, tcp,3632,s0)policy/modules/system/sysnetwork.te +0
-0
policy/modules/system/sysnetwork.te corenet_tcp_sendrecv_all_ports(dhcpc_t) · line 109
Quoted 7 lines
policy/modules/system/sysnetwork.te +1
-0@@ -103,6 +103,7 @@ corenet_tcp_sendrecv_all_ports(dhcpc_t) corenet_udp_sendrecv_all_ports(dhcpc_t) corenet_tcp_bind_all_nodes(dhcpc_t) corenet_udp_bind_all_nodes(dhcpc_t) +corenet_tcp_bind_dhcpc_port(dhcpc_t) corenet_udp_bind_dhcpc_port(dhcpc_t) corenet_tcp_connect_all_ports(dhcpc_t) corenet_sendrecv_dhcpd_client_packets(dhcpc_t)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com