From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 347A1138A1A for ; Thu, 29 Jan 2015 09:12:22 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9EED4E07E6; Thu, 29 Jan 2015 09:12:19 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 4AB92E07E8 for ; Thu, 29 Jan 2015 09:12:19 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 7561C3406DD for ; Thu, 29 Jan 2015 09:12:18 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id DCFCD108FF for ; Thu, 29 Jan 2015 09:12:15 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1422520373.a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/init.te X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93 X-VCS-Branch: master Date: Thu, 29 Jan 2015 09:12:15 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 165cadff-e85a-434c-91eb-530768cae1f0 X-Archives-Hash: f60d8586c1c4cd1a076867ce5e302b27 commit: a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93 Author: Jason Zaman perfinion com> AuthorDate: Tue Jan 20 14:31:35 2015 +0000 Commit: Jason Zaman perfinion com> CommitDate: Thu Jan 29 08:32:53 2015 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=a0f63a5e init: needs access to networkmanager rawip sockets --- policy/modules/system/init.te | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 5d83a49..c265e53 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -977,6 +977,11 @@ ifdef(`distro_gentoo',` ') optional_policy(` + networkmanager_rw_rawip_sockets(initrc_t) + networkmanager_stream_connect(initrc_t) + ') + + optional_policy(` fail2ban_stream_connect(initrc_t) ') From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id F1432138A1A for ; Thu, 29 Jan 2015 08:38:28 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E6B30E07E6; Thu, 29 Jan 2015 08:38:26 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 698DEE07DB for ; Thu, 29 Jan 2015 08:38:26 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 90B593406C4 for ; Thu, 29 Jan 2015 08:38:25 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id CA0AA108F6 for ; Thu, 29 Jan 2015 08:38:22 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1422520373.a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/init.te X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93 X-VCS-Branch: next Date: Thu, 29 Jan 2015 08:38:22 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 9aeb0485-5b5f-46b0-9e71-35439663034d X-Archives-Hash: 797a34ced9c210aa286864798be995eb Message-ID: <20150129083822.-spwL6s2P27vFIl2PdyR4BvBoTHI-a9DxSbJwMEgj3M@z> commit: a0f63a5ebdaa7a52d2ea96dc1f3299f741313f93 Author: Jason Zaman perfinion com> AuthorDate: Tue Jan 20 14:31:35 2015 +0000 Commit: Jason Zaman perfinion com> CommitDate: Thu Jan 29 08:32:53 2015 +0000 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=a0f63a5e init: needs access to networkmanager rawip sockets --- policy/modules/system/init.te | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 5d83a49..c265e53 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -977,6 +977,11 @@ ifdef(`distro_gentoo',` ') optional_policy(` + networkmanager_rw_rawip_sockets(initrc_t) + networkmanager_stream_connect(initrc_t) + ') + + optional_policy(` fail2ban_stream_connect(initrc_t) ')