diff --git a/policy/modules/services/fail2ban.te b/policy/modules/services/fail2ban.te index 63c02c4..e0afad3 100644 --- a/policy/modules/services/fail2ban.te +++ b/policy/modules/services/fail2ban.te @@ -1,5 +1,5 @@ -policy_module(fail2ban, 1.3.0) +policy_module(fail2ban, 1.3.1) ######################################## # @@ -33,6 +33,7 @@ allow fail2ban_t self:capability { sys_tty_config }; allow fail2ban_t self:process signal; allow fail2ban_t self:fifo_file rw_fifo_file_perms; allow fail2ban_t self:unix_stream_socket { connectto create_stream_socket_perms }; +allow fail2ban_t self:unix_dgram_socket create_socket_perms; allow fail2ban_t self:tcp_socket create_stream_socket_perms; # log files @@ -79,6 +80,7 @@ fs_getattr_all_fs(fail2ban_t) auth_use_nsswitch(fail2ban_t) logging_read_all_logs(fail2ban_t) +logging_send_syslog_msg(fail2ban_t) miscfiles_read_localization(fail2ban_t)