diff --git a/strict/flask/access_vectors b/strict/flask/access_vectors index 22e1358..dc20463 100644 --- a/strict/flask/access_vectors +++ b/strict/flask/access_vectors @@ -161,6 +161,7 @@ inherits socket newconn acceptfrom node_bind + name_connect } class udp_socket @@ -249,6 +250,8 @@ class process dyntransition setcurrent execmem + execstack + execheap } @@ -552,6 +555,8 @@ inherits socket { nlmsg_read nlmsg_write + nlmsg_relay + nlmsg_readpriv } class netlink_ip6fw_socket @@ -597,3 +602,7 @@ class association sendto recvfrom } + +# Updated Netlink class for KOBJECT_UEVENT family. +class netlink_kobject_uevent_socket +inherits socket diff --git a/strict/flask/security_classes b/strict/flask/security_classes index b370522..2669c30 100644 --- a/strict/flask/security_classes +++ b/strict/flask/security_classes @@ -80,4 +80,7 @@ class nscd # IPSec association class association +# Updated Netlink class for KOBJECT_UEVENT family. +class netlink_kobject_uevent_socket + # FLASK diff --git a/strict/macros/core_macros.te b/strict/macros/core_macros.te index 6b4e5be..37f2975 100644 --- a/strict/macros/core_macros.te +++ b/strict/macros/core_macros.te @@ -39,7 +39,7 @@ define(`devfile_class_set', `{ chr_file blk_file }') # # All socket classes. # -define(`socket_class_set', `{ tcp_socket udp_socket rawip_socket netlink_socket packet_socket unix_stream_socket unix_dgram_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket }') +define(`socket_class_set', `{ tcp_socket udp_socket rawip_socket netlink_socket packet_socket unix_stream_socket unix_dgram_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket }') #