diff --git a/policy/modules/services/zebra.if b/policy/modules/services/zebra.if index cc3eb84..6b87605 100644 --- a/policy/modules/services/zebra.if +++ b/policy/modules/services/zebra.if @@ -24,7 +24,27 @@ interface(`zebra_read_config',` ######################################## ## <summary> -## All of the rules required to administrate +## Connect to zebra over an unix stream socket. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`zebra_stream_connect',` + gen_require(` + type zebra_t, zebra_var_run_t; + ') + + files_search_pids($1) + allow $1 zebra_var_run_t:sock_file write; + allow $1 zebra_t:unix_stream_socket connectto; +') + +######################################## +## <summary> +## All of the rules required to administrate ## an zebra environment ## </summary> ## <param name="domain"> diff --git a/policy/modules/services/zebra.te b/policy/modules/services/zebra.te index b6ea7dd..c23f9a1 100644 --- a/policy/modules/services/zebra.te +++ b/policy/modules/services/zebra.te @@ -1,5 +1,5 @@ -policy_module(zebra, 1.10.0) +policy_module(zebra, 1.10.1) ######################################## #