From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Fri, 9 Sep 2011 21:48:46 +0200 Subject: [refpolicy] [PATCHv2 4/6] Allow wireshark to execute bin_t In-Reply-To: <20110909194626.GC32612@siphos.be> References: <20110909194626.GC32612@siphos.be> Message-ID: <20110909194846.GG32612@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Wireshark needs to be able to execute applications, definitely for its plugin support, but also to call the dumpcap utility (part of the wireshark distribution) to be able to dump the network traffic. Signed-off-by: Sven Vermeulen --- wireshark.te | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/wireshark.te b/wireshark.te index db06f15..2ec43c4 100644 --- a/wireshark.te +++ b/wireshark.te @@ -69,6 +69,7 @@ kernel_read_kernel_sysctls(wireshark_t) kernel_read_system_state(wireshark_t) kernel_read_sysctl(wireshark_t) +corecmd_exec_bin(wireshark_t) corecmd_search_bin(wireshark_t) corenet_tcp_connect_generic_port(wireshark_t) -- 1.7.3.4