From 5b082e4acfbfe460097097ca8dbe014554d6e3af Mon Sep 17 00:00:00 2001 From: Jeremy Solt Date: Sep 15 2010 13:14:53 +0000 Subject: arpwatch patch from Dan Walsh --- diff --git a/policy/modules/services/arpwatch.te b/policy/modules/services/arpwatch.te index 0160ba4..f31b5c9 100644 --- a/policy/modules/services/arpwatch.te +++ b/policy/modules/services/arpwatch.te @@ -50,6 +50,7 @@ kernel_read_network_state(arpwatch_t) kernel_read_kernel_sysctls(arpwatch_t) kernel_list_proc(arpwatch_t) kernel_read_proc_symlinks(arpwatch_t) +kernel_request_load_module(arpwatch_t) corenet_all_recvfrom_unlabeled(arpwatch_t) corenet_all_recvfrom_netlabel(arpwatch_t) @@ -63,6 +64,7 @@ corenet_tcp_sendrecv_all_ports(arpwatch_t) corenet_udp_sendrecv_all_ports(arpwatch_t) dev_read_sysfs(arpwatch_t) +dev_read_usbmon_dev(arpwatch_t) dev_rw_generic_usb_dev(arpwatch_t) fs_getattr_all_fs(arpwatch_t)