diff --git a/policy/modules/services/zebra.if b/policy/modules/services/zebra.if index cc3eb84..6b87605 100644 --- a/policy/modules/services/zebra.if +++ b/policy/modules/services/zebra.if @@ -24,7 +24,27 @@ interface(`zebra_read_config',` ######################################## ## -## All of the rules required to administrate +## Connect to zebra over an unix stream socket. +## +## +## +## Domain allowed access. +## +## +# +interface(`zebra_stream_connect',` + gen_require(` + type zebra_t, zebra_var_run_t; + ') + + files_search_pids($1) + allow $1 zebra_var_run_t:sock_file write; + allow $1 zebra_t:unix_stream_socket connectto; +') + +######################################## +## +## All of the rules required to administrate ## an zebra environment ## ## diff --git a/policy/modules/services/zebra.te b/policy/modules/services/zebra.te index b6ea7dd..c23f9a1 100644 --- a/policy/modules/services/zebra.te +++ b/policy/modules/services/zebra.te @@ -1,5 +1,5 @@ -policy_module(zebra, 1.10.0) +policy_module(zebra, 1.10.1) ######################################## #