From: "Jason Zaman" <gentoo@perfinion.com>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] proj/hardened-refpolicy:perfinion commit in: policy/modules/system/
Date: Wed, 20 Aug 2014 17:07:40 +0000 (UTC) [thread overview]
Message-ID: <1408551989.d797c3eae29994e49f35aeb52d15926561172347.perfinion@gentoo> (raw)
commit: d797c3eae29994e49f35aeb52d15926561172347
Author: Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Wed Aug 20 16:26:29 2014 +0000
Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Wed Aug 20 16:26:29 2014 +0000
URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=d797c3ea
Allow udev udev to set predictable ifnames
Udev sets the interface names predictably, it uses a
netlink_route_socket to do so.
more info at:
http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/
---
policy/modules/system/udev.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te
index 83a8b11..94adb3b 100644
--- a/policy/modules/system/udev.te
+++ b/policy/modules/system/udev.te
@@ -331,6 +331,7 @@ ifdef(`distro_gentoo',`
#
allow udev_t self:capability2 block_suspend;
allow udev_t udev_tbl_t:dir relabelto;
+ allow udev_t self:netlink_route_socket rw_netlink_socket_perms;
manage_dirs_pattern(udev_t, udev_tbl_t, udev_tbl_t)
manage_files_pattern(udev_t, udev_tbl_t, udev_tbl_t)
next reply other threads:[~2014-08-20 17:08 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-08-20 17:07 Jason Zaman [this message]
-- strict thread matches above, loose matches on Subject: below --
2014-10-12 9:51 [gentoo-commits] proj/hardened-refpolicy:perfinion commit in: policy/modules/system/ Jason Zaman
2014-10-12 9:51 Jason Zaman
2014-08-25 17:16 Jason Zaman
2014-08-25 17:16 Jason Zaman
2014-08-25 17:16 Jason Zaman
2014-08-22 12:27 Jason Zaman
2014-08-22 12:27 Jason Zaman
2014-08-20 17:10 [gentoo-commits] proj/hardened-refpolicy:next " Jason Zaman
2014-08-20 17:13 ` [gentoo-commits] proj/hardened-refpolicy:perfinion " Jason Zaman
2014-08-19 20:18 Jason Zaman
2014-08-19 20:18 Jason Zaman
2014-08-19 20:18 Jason Zaman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1408551989.d797c3eae29994e49f35aeb52d15926561172347.perfinion@gentoo \
--to=gentoo@perfinion.com \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox