Adding a couple of SELinux rules, includes fix for rhbz#2149299

2023-09-01 13:18:54 +02:00
parent ce3ab829c6
commit 76e3ee52e3
2 changed files with 7 additions and 1 deletions
--- a/frr.te
+++ b/frr.te
@@ -70,6 +70,7 @@ can_exec(frr_t, frr_exec_t)
 kernel_read_network_state(frr_t)
 kernel_rw_net_sysctls(frr_t)
 kernel_read_system_state(frr_t)
+kernel_request_load_module(frr_t)

 auth_use_nsswitch(frr_t)

@@ -100,6 +101,8 @@ sysnet_exec_ifconfig(frr_t)
 sysnet_read_ifconfig_run(frr_t)
 sysnet_watch_ifconfig_run(frr_t)

+ipsec_domtrans_mgmt(frr_t)
+
 userdom_read_admin_home_files(frr_t)

 optional_policy(`