From: jason@perfinion.com (Jason Zaman)
Date: Tue, 31 Oct 2017 13:37:58 +0800
Subject: [refpolicy] [PATCH 3/3] rpc: Allow stream connect to gssproxy
In-Reply-To: <20171031053758.7816-1-jason@perfinion.com>
References: <20171031053758.7816-1-jason@perfinion.com>
Message-ID: <20171031053758.7816-3-jason@perfinion.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

---
 rpc.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/rpc.te b/rpc.te
index 4a96ab2..baca79c 100644
--- a/rpc.te
+++ b/rpc.te
@@ -335,6 +335,9 @@ optional_policy(`
 ')
 
 optional_policy(`
+	gssproxy_stream_connect(gssd_t)
+')
+optional_policy(`
 	kerberos_manage_host_rcache(gssd_t)
 	kerberos_read_keytab(gssd_t)
 	kerberos_tmp_filetrans_host_rcache(gssd_t, file, "nfs_0")
-- 
2.13.6