diff --git a/policy/modules/services/zebra.te b/policy/modules/services/zebra.te index 086cbef..fcb3f59 100644 --- a/policy/modules/services/zebra.te +++ b/policy/modules/services/zebra.te @@ -61,9 +61,10 @@ logging_log_filetrans(zebra_t, zebra_log_t, { sock_file file dir }) allow zebra_t zebra_tmp_t:sock_file manage_sock_file_perms; files_tmp_filetrans(zebra_t, zebra_tmp_t, sock_file) +manage_dirs_pattern(zebra_t, zebra_var_run_t, zebra_var_run_t) manage_files_pattern(zebra_t, zebra_var_run_t, zebra_var_run_t) manage_sock_files_pattern(zebra_t, zebra_var_run_t, zebra_var_run_t) -files_pid_filetrans(zebra_t, zebra_var_run_t, { file sock_file }) +files_pid_filetrans(zebra_t, zebra_var_run_t, { dir file sock_file }) kernel_read_system_state(zebra_t) kernel_read_network_state(zebra_t)