Add the 'forward_in' and 'forward_out' permissions to the packet object class to support the new forwarding controls added to the 2.6.25 kernel. Signed-off-by: Paul Moore <paul.moore@xxxxxx> --- policy/flask/access_vectors | 2 ++ 1 file changed, 2 insertions(+) Index: refpolicy_svn_repo/policy/flask/access_vectors =================================================================== --- refpolicy_svn_repo.orig/policy/flask/access_vectors +++ refpolicy_svn_repo/policy/flask/access_vectors @@ -652,6 +652,8 @@ class packet relabelto flow_in # not currently in use flow_out # not currently in use + forward_in + forward_out } class key -- paul moore linux security @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
