diff --git a/netd.te b/netd.te index 938fc686b3a0f310d6d9f644154a89f2cf68fb61..72784da8b0ca5145af1f3f0ebafb2e3671395228 100644 --- a/netd.te +++ b/netd.te @@ -3,15 +3,13 @@ type netd, domain; type netd_exec, exec_type, file_type; init_daemon_domain(netd) +net_domain(netd) + allow netd self:capability { net_admin net_raw kill fsetid }; allow netd self:netlink_kobject_uevent_socket *; allow netd self:netlink_route_socket *; allow netd self:netlink_nflog_socket *; allow netd self:rawip_socket *; -allow netd self:{ tcp_socket udp_socket } *; -allow netd node:{ tcp_socket udp_socket } node_bind; -allow netd port:{ tcp_socket udp_socket } name_bind; -allow netd port:tcp_socket name_connect; allow netd self:unix_stream_socket *; allow netd shell_exec:file rx_file_perms; allow netd system_file:file x_file_perms;