Arping needs setcap to cap_set_proc
PATCH 1/1 Arping needs setcap to cap_set_proc
rhbz#869615
Signed-off-by Dominick Grift <[email protected]>
policy/modules/admin/netutils.te +1 -1
@@ -35,7 +35,7 @@ # Perform network administration operations and have raw access to the network. allow netutils_t self:capability { net_admin net_raw setuid setgid }; dontaudit netutils_t self:capability sys_tty_config; -allow netutils_t self:process signal_perms; +allow netutils_t self:process { setcap signal_perms }; allow netutils_t self:netlink_route_socket create_netlink_socket_perms; allow netutils_t self:packet_socket create_socket_perms; allow netutils_t self:udp_socket create_socket_perms;
PATCH 1/1 Arping needs setcap to cap_set_proc
Quoted 9 lines · Dominick Grift
rhbz#869615
Signed-off-by Dominick Grift <[email protected]>policy/modules/admin/netutils.te +0
-0
policy/modules/admin/netutils.te line 41
Quoted 8 lines
policy/modules/admin/netutils.te +1
-1@@ -35,7 +35,7 @@ # Perform network administration operations and have raw access to the network. allow netutils_t self:capability { net_admin net_raw setuid setgid }; dontaudit netutils_t self:capability sys_tty_config; -allow netutils_t self:process signal_perms; +allow netutils_t self:process { setcap signal_perms }; allow netutils_t self:netlink_route_socket create_netlink_socket_perms; allow netutils_t self:packet_socket create_socket_perms; allow netutils_t self:udp_socket create_socket_perms;
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com