Skip to contentSkip to conversation

Add dropbox_port_t support

PATCH New Sven Vermeulen 2 participants 2 messages Jun 7, 2014 – Jun 9, 2014

lore
Share & tools
lore

Sven Vermeulen

author
#0 lore raw

PATCH 1/1 Add dropbox_port_t support

The dropbox application has a feature called "LAN Sync" which works on TCP & UDP port 17500. Marking this port as dropbox_port_t (instead of the currently default unreserved_port_t) allows for more fine-grained access control to this resource.

Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/kernel/corenetwork.te.in | 1 +
 1 file changed, 1 insertion(+)
policy/modules/kernel/corenetwork.te.in +1 -0
index 7fe89bc..5f28977 100644
@@ -120,6 +120,7 @@ network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0,
 network_port(dict, tcp,2628,s0)
 network_port(distccd, tcp,3632,s0)
 network_port(dns, tcp,53,s0, udp,53,s0)
+network_port(dropbox, tcp,17500,s0, udp,17500,s0)
 network_port(efs, tcp,520,s0)
 network_port(embrace_dp_c, tcp,3198,s0, udp,3198,s0)
 network_port(epmap, tcp,135,s0, udp,135,s0)
Signature · 1 line
1.8.5.5
#1 lore raw

PATCH 1/1 Add dropbox_port_t support

Quoted 15 lines · Sven Vermeulen

The dropbox application has a feature called "LAN Sync" which works on TCP & UDP port 17500. Marking this port as dropbox_port_t (instead of the currently default unreserved_port_t) allows for more fine-grained access control to this resource.

Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/kernel/corenetwork.te.in | 1 +
 1 file changed, 1 insertion(+)
policy/modules/kernel/corenetwork.te.in +0 -0
index 7fe89bc..5f28977 100644

policy/modules/kernel/corenetwork.te.in network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0, · line 126

Quoted 7 lines
policy/modules/kernel/corenetwork.te.in +1 -0
@@ -120,6 +120,7 @@ network_port(dhcpd, udp,67,s0, udp,547,s0, tcp, 547,s0, udp,548,s0, tcp, 548,s0,
 network_port(dict, tcp,2628,s0)
 network_port(distccd, tcp,3632,s0)
 network_port(dns, tcp,53,s0, udp,53,s0)
+network_port(dropbox, tcp,17500,s0, udp,17500,s0)
 network_port(efs, tcp,520,s0)
 network_port(embrace_dp_c, tcp,3198,s0, udp,3198,s0)
 network_port(epmap, tcp,135,s0, udp,135,s0)

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com