2022-11-14 09:27:42 +01:00
|
|
|
Index: fedora-policy-20221019/policy/modules/contrib/networkmanager.te
|
2020-03-05 11:13:59 +01:00
|
|
|
===================================================================
|
2022-11-14 09:27:42 +01:00
|
|
|
--- fedora-policy-20221019.orig/policy/modules/contrib/networkmanager.te
|
|
|
|
|
+++ fedora-policy-20221019/policy/modules/contrib/networkmanager.te
|
|
|
|
|
@@ -275,6 +275,9 @@ userdom_read_home_certs(NetworkManager_t
|
2020-03-05 11:13:59 +01:00
|
|
|
userdom_read_user_home_content_files(NetworkManager_t)
|
|
|
|
|
userdom_dgram_send(NetworkManager_t)
|
|
|
|
|
|
|
|
|
|
+hostname_exec(NetworkManager_t)
|
|
|
|
|
+networkmanager_systemctl(NetworkManager_t)
|
|
|
|
|
+
|
|
|
|
|
tunable_policy(`use_nfs_home_dirs',`
|
|
|
|
|
fs_read_nfs_files(NetworkManager_t)
|
|
|
|
|
')
|
2022-11-14 09:27:42 +01:00
|
|
|
@@ -284,6 +287,10 @@ tunable_policy(`use_samba_home_dirs',`
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
+ nis_systemctl_ypbind(NetworkManager_t)
|
|
|
|
|
+')
|
|
|
|
|
+
|
|
|
|
|
+optional_policy(`
|
|
|
|
|
avahi_domtrans(NetworkManager_t)
|
|
|
|
|
avahi_kill(NetworkManager_t)
|
|
|
|
|
avahi_signal(NetworkManager_t)
|
|
|
|
|
@@ -292,6 +299,14 @@ optional_policy(`
|
2020-03-05 11:13:59 +01:00
|
|
|
')
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
+ packagekit_dbus_chat(NetworkManager_t)
|
|
|
|
|
+')
|
|
|
|
|
+
|
2020-03-17 15:46:20 +01:00
|
|
|
+optional_policy(`
|
|
|
|
|
+ networkmanager_dbus_chat(NetworkManager_t)
|
|
|
|
|
+')
|
|
|
|
|
+
|
2020-03-05 11:13:59 +01:00
|
|
|
+optional_policy(`
|
|
|
|
|
bind_domtrans(NetworkManager_t)
|
|
|
|
|
bind_manage_cache(NetworkManager_t)
|
|
|
|
|
bind_kill(NetworkManager_t)
|
2022-11-14 09:27:42 +01:00
|
|
|
@@ -419,6 +434,8 @@ optional_policy(`
|
2022-07-27 17:24:55 +02:00
|
|
|
nscd_kill(NetworkManager_t)
|
|
|
|
|
nscd_initrc_domtrans(NetworkManager_t)
|
|
|
|
|
nscd_systemctl(NetworkManager_t)
|
|
|
|
|
+ nscd_socket_use(NetworkManager_dispatcher_tlp_t)
|
|
|
|
|
+ nscd_socket_use(NetworkManager_dispatcher_custom_t)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
2022-11-14 09:27:42 +01:00
|
|
|
@@ -606,6 +623,7 @@ files_manage_etc_files(NetworkManager_di
|
2022-09-29 17:51:37 +02:00
|
|
|
|
|
|
|
|
init_status(NetworkManager_dispatcher_cloud_t)
|
|
|
|
|
init_status(NetworkManager_dispatcher_ddclient_t)
|
|
|
|
|
+init_status(NetworkManager_dispatcher_custom_t)
|
|
|
|
|
init_append_stream_sockets(networkmanager_dispatcher_plugin)
|
|
|
|
|
init_ioctl_stream_sockets(networkmanager_dispatcher_plugin)
|
|
|
|
|
init_stream_connect(networkmanager_dispatcher_plugin)
|
2022-11-14 09:27:42 +01:00
|
|
|
@@ -621,6 +639,10 @@ optional_policy(`
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
+ nscd_shm_use(NetworkManager_dispatcher_chronyc_t)
|
|
|
|
|
+')
|
|
|
|
|
+
|
|
|
|
|
+optional_policy(`
|
|
|
|
|
cloudform_init_domtrans(NetworkManager_dispatcher_cloud_t)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
Index: fedora-policy-20221019/policy/modules/contrib/networkmanager.if
|
2020-03-05 11:13:59 +01:00
|
|
|
===================================================================
|
2022-11-14 09:27:42 +01:00
|
|
|
--- fedora-policy-20221019.orig/policy/modules/contrib/networkmanager.if
|
|
|
|
|
+++ fedora-policy-20221019/policy/modules/contrib/networkmanager.if
|
2021-11-11 17:01:20 +01:00
|
|
|
@@ -132,6 +132,24 @@ interface(`networkmanager_initrc_domtran
|
2020-03-05 11:13:59 +01:00
|
|
|
init_labeled_script_domtrans($1, NetworkManager_initrc_exec_t)
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
+#######################################
|
|
|
|
|
+## <summary>
|
|
|
|
|
+## Allow reading of NetworkManager link files
|
|
|
|
|
+## </summary>
|
|
|
|
|
+## <param name="domain">
|
|
|
|
|
+## <summary>
|
|
|
|
|
+## Domain allowed to read the links
|
|
|
|
|
+## </summary>
|
|
|
|
|
+## </param>
|
|
|
|
|
+#
|
|
|
|
|
+interface(`networkmanager_initrc_read_lnk_files',`
|
|
|
|
|
+ gen_require(`
|
|
|
|
|
+ type NetworkManager_initrc_exec_t;
|
|
|
|
|
+ ')
|
|
|
|
|
+
|
|
|
|
|
+ read_lnk_files_pattern($1, NetworkManager_initrc_exec_t, NetworkManager_initrc_exec_t)
|
|
|
|
|
+')
|
|
|
|
|
+
|
|
|
|
|
########################################
|
|
|
|
|
## <summary>
|
|
|
|
|
## Execute NetworkManager server in the NetworkManager domain.
|
2022-11-14 09:27:42 +01:00
|
|
|
Index: fedora-policy-20221019/policy/modules/contrib/networkmanager.fc
|
2022-09-29 16:06:49 +02:00
|
|
|
===================================================================
|
2022-11-14 09:27:42 +01:00
|
|
|
--- fedora-policy-20221019.orig/policy/modules/contrib/networkmanager.fc
|
|
|
|
|
+++ fedora-policy-20221019/policy/modules/contrib/networkmanager.fc
|
2022-09-29 16:06:49 +02:00
|
|
|
@@ -24,6 +24,7 @@
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/04-iscsi -- gen_context(system_u:object_r:NetworkManager_dispatcher_iscsid_script_t,s0)
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/10-sendmail -- gen_context(system_u:object_r:NetworkManager_dispatcher_sendmail_script_t,s0)
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/11-dhclient -- gen_context(system_u:object_r:NetworkManager_dispatcher_dhclient_script_t,s0)
|
|
|
|
|
+/usr/lib/NetworkManager/dispatcher\.d/20-chrony -- gen_context(system_u:object_r:NetworkManager_dispatcher_chronyc_script_t,s0)
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/20-chrony-dhcp -- gen_context(system_u:object_r:NetworkManager_dispatcher_chronyc_script_t,s0)
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/20-chrony-onoffline -- gen_context(system_u:object_r:NetworkManager_dispatcher_chronyc_script_t,s0)
|
|
|
|
|
/usr/lib/NetworkManager/dispatcher\.d/30-winbind -- gen_context(system_u:object_r:NetworkManager_dispatcher_winbind_script_t,s0)
|
