Fix backslashes in SHIBSP_PREFIX variable by manually creating it during the script...

[shibboleth/sp.git] / selinux / shibshar.te

diff --git a/selinux/shibshar.te b/selinux/shibshar.te
index 444272b..321da2e 100644 (file)
--- a/selinux/shibshar.te
+++ b/selinux/shibshar.te
@@ -12,6 +12,7 @@ can_exec(shibshar_t, shibshar_exec_t)
 uses_shlib(shibshar_t)
 can_network(shibshar_t)
 can_tcp_connect(shibshar_t, unconfined_t)
+allow shibshar_t port_type:tcp_socket name_connect;
 allow shibshar_t etc_t:file r_file_perms;
 allow shibshar_t bin_t:dir r_dir_perms;
 allow shibshar_t bin_t:file rx_file_perms;
@@ -20,9 +21,11 @@ allow shibshar_t var_log_t:file rw_file_perms;
 allow shibshar_t var_log_t:file { create };
 
 allow shibshar_t shibshar_t:unix_stream_socket create_stream_socket_perms;
-allow shibshar_t shibshar_t:netlink_route_socket { create bind };
+allow shibshar_t shibshar_t:netlink_route_socket { create bind getattr};
 allow shibshar_t usr_t:dir r_dir_perms;
 allow shibshar_t usr_t:file rx_file_perms;
+
+allow shibshar_t urandom_device_t:chr_file { getattr ioctl read };
  
 # Enable HTTPD to connect to the shib-shar socket and read/write to it
 can_unix_connect(httpd_t, shibshar_var_run_t)