From:   Russell Coker <russell@coker.com.au>
To:     Chris PeBenito <pebenito@ieee.org>
Reply-To: russell@coker.com.au
Cc:     selinux-refpolicy@vger.kernel.org
Subject: Re: [PATCH misc 3/3] networkmanager apt bootloader dpkg raid modutils tor devicekit dicts irqbalance policykit and postfix
Date:   Thu, 03 Jan 2019 12:19:16 +1100
Message-ID: <2798399.SdR9s7MnL5@xev>
In-Reply-To: <b0ab0455-cdfe-be36-2c28-1398cabb58ac@ieee.org>
References: <20190102092027.GC31076@aaa.coker.com.au> <b0ab0455-cdfe-be36-2c28-1398cabb58ac@ieee.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Sender: selinux-refpolicy-owner@vger.kernel.org
Precedence: bulk

On Thursday, 3 January 2019 11:14:06 AM AEDT Chris PeBenito wrote:
> On 1/2/19 4:20 AM, Russell Coker wrote:
> > Trivial stuff.
> > 
> > 
> > Index: refpolicy-2.20180701/policy/modules/services/networkmanager.te
> > ===================================================================
> > --- refpolicy-2.20180701.orig/policy/modules/services/networkmanager.te
> > +++ refpolicy-2.20180701/policy/modules/services/networkmanager.te
> > @@ -57,6 +57,7 @@ allow NetworkManager_t self:tcp_socket {
> > 
> >   allow NetworkManager_t self:tun_socket { create_socket_perms relabelfrom
> >   relabelto }; allow NetworkManager_t self:packet_socket
> >   create_socket_perms;
> >   allow NetworkManager_t self:socket create_socket_perms;
> > 
> > +allow NetworkManager_t self:rawip_socket { create setopt getattr write
> > read };
> This seems odd.  Can you provide any more details on this?

From memory it appeared to be some sort of ping functionality built in.  Feel 
free to drop that section and apply the rest, I can do more testing on it if 
you like.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/