diff --git a/refpolicy/policy/modules/services/radius.te b/refpolicy/policy/modules/services/radius.te index cb79790..66574c4 100644 --- a/refpolicy/policy/modules/services/radius.te +++ b/refpolicy/policy/modules/services/radius.te @@ -73,6 +73,7 @@ fs_search_auto_mountpoints(radiusd_t) term_dontaudit_use_console(radiusd_t) auth_read_shadow(radiusd_t) +auth_domtrans_chk_passwd(radiusd_t) corecmd_exec_bin(radiusd_t) corecmd_exec_shell(radiusd_t) diff --git a/refpolicy/policy/modules/system/sysnetwork.if b/refpolicy/policy/modules/system/sysnetwork.if index 42f145b..386661c 100644 --- a/refpolicy/policy/modules/system/sysnetwork.if +++ b/refpolicy/policy/modules/system/sysnetwork.if @@ -419,7 +419,7 @@ interface(`sysnet_dns_name_resolve',` corenet_tcp_sendrecv_all_nodes($1) corenet_udp_sendrecv_all_nodes($1) corenet_raw_sendrecv_all_nodes($1) - corenet_tcp_sendrecv_all_ports($1) + corenet_tcp_sendrecv_dns_port($1) corenet_udp_sendrecv_dns_port($1) corenet_tcp_bind_all_nodes($1) corenet_udp_bind_all_nodes($1)