From: dsugar@tresys.com (Dave Sugar) Date: Mon, 5 Mar 2018 09:03:00 -0500 Subject: [refpolicy] [PATCH 3/5-v4] Chronyd talks ntp client packets to get time from server In-Reply-To: <20180305140302.31341-1-dsugar@tresys.com> References: <20180305140302.31341-1-dsugar@tresys.com> Message-ID: <20180305140302.31341-4-dsugar@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com chronyd is an NTP client along with an NTP server. Change to allow chronyd to send/recv ntp client packets. Signed-off-by: Dave Sugar --- chronyd.te | 1 + 1 file changed, 1 insertion(+) diff --git a/chronyd.te b/chronyd.te index 09d7f83..f28dd5e 100644 --- a/chronyd.te +++ b/chronyd.te @@ -74,6 +74,7 @@ corenet_udp_sendrecv_generic_if(chronyd_t) corenet_udp_sendrecv_generic_node(chronyd_t) corenet_udp_bind_generic_node(chronyd_t) +corenet_sendrecv_ntp_client_packets(chronyd_t) corenet_sendrecv_ntp_server_packets(chronyd_t) corenet_udp_bind_ntp_port(chronyd_t) corenet_udp_sendrecv_ntp_port(chronyd_t) -- 2.14.3