kismet is a network sniffer so net_raw seems quite reasonable...
Index: refpolicy/policy/modules/admin/kismet.te
===================================================================
--- refpolicy.orig/policy/modules/admin/kismet.te 2008-08-03 18:30:11.000000000 +0200
+++ refpolicy/policy/modules/admin/kismet.te 2008-08-03 18:30:32.000000000 +0200
@@ -25,7 +25,7 @@
# kismet local policy
#
-allow kismet_t self:capability { net_admin setuid setgid };
+allow kismet_t self:capability { net_admin net_raw setuid setgid };
allow kismet_t self:packet_socket create_socket_perms;
manage_files_pattern(kismet_t, kismet_log_t, kismet_log_t)
--
David Härdeman
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
