From: pebenito@ieee.org (Chris PeBenito)
Date: Tue, 28 Nov 2017 20:37:16 -0500
Subject: [refpolicy] [PATCH 1/1] networkmanager: Grant access to
	unlabeled PKeys
In-Reply-To: <1511792588-23907-1-git-send-email-danielj@mellanox.com>
References: <1511792588-23907-1-git-send-email-danielj@mellanox.com>
Message-ID: <f59d3d1a-fca7-4d73-4eda-5750bf326c99@ieee.org>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 11/27/2017 09:23 AM, Dan Jurgens wrote:
> From: Daniel Jurgens <danielj@mellanox.com>
> 
> For controlling IPoIB VLANs
> 
> Reported-by: Honggang LI <honli@redhat.com>
> Signed-off-by: Daniel Jurgens <danielj@mellanox.com>
> Tested-by: Honggang LI <honli@redhat.com>
> ---
>   networkmanager.te |    2 ++
>   1 files changed, 2 insertions(+), 0 deletions(-)
> 
> diff --git a/networkmanager.te b/networkmanager.te
> index 76d0106..5e881f4 100644
> --- a/networkmanager.te
> +++ b/networkmanager.te
> @@ -184,6 +184,8 @@ userdom_write_user_tmp_sockets(NetworkManager_t)
>   userdom_dontaudit_use_unpriv_user_fds(NetworkManager_t)
>   userdom_dontaudit_use_user_ttys(NetworkManager_t)
>   
> +corenet_ib_access_unlabeled_pkeys(NetworkManager_t)
> +
>   optional_policy(`
>   	avahi_domtrans(NetworkManager_t)
>   	avahi_kill(NetworkManager_t)

Merged.

-- 
Chris PeBenito