aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKenton Groombridge <concord@gentoo.org>2022-10-12 09:34:10 -0400
committerKenton Groombridge <concord@gentoo.org>2022-10-12 09:34:10 -0400
commitab4247d2a76e436488b7b02833f795e258e17156 (patch)
treefa73b272dade7e59d5d5dc6c32c2651ed768a40f
parentnginx: add file context for nginx in /usr/bin (diff)
downloadhardened-refpolicy-concord-dev.tar.gz
hardened-refpolicy-concord-dev.tar.bz2
hardened-refpolicy-concord-dev.zip
netutils: add file context for ss in /usr/binconcord-dev
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
-rw-r--r--policy/modules/admin/netutils.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/admin/netutils.fc b/policy/modules/admin/netutils.fc
index 3086ab3d..acb9ed60 100644
--- a/policy/modules/admin/netutils.fc
+++ b/policy/modules/admin/netutils.fc
@@ -7,6 +7,7 @@
/usr/bin/mtr-packet -- gen_context(system_u:object_r:traceroute_exec_t,s0)
/usr/bin/nmap -- gen_context(system_u:object_r:traceroute_exec_t,s0)
/usr/bin/ping.* -- gen_context(system_u:object_r:ping_exec_t,s0)
+/usr/bin/ss -- gen_context(system_u:object_r:ss_exec_t,s0)
/usr/bin/send_arp -- gen_context(system_u:object_r:ping_exec_t,s0)
/usr/bin/tcpdump -- gen_context(system_u:object_r:netutils_exec_t,s0)
/usr/bin/tracepath.* -- gen_context(system_u:object_r:traceroute_exec_t,s0)