On Mon, 2008-08-04 at 14:35 +0200, david@xxxxxxxxxxx wrote:
> plain text document attachment (policy_modules_admin_kismet.patch)
> kismet is a network sniffer so net_raw seems quite reasonable...
Merged.
> Index: refpolicy/policy/modules/admin/kismet.te
> ===================================================================
> --- refpolicy.orig/policy/modules/admin/kismet.te 2008-08-03 18:30:11.000000000 +0200
> +++ refpolicy/policy/modules/admin/kismet.te 2008-08-03 18:30:32.000000000 +0200
> @@ -25,7 +25,7 @@
> # kismet local policy
> #
>
> -allow kismet_t self:capability { net_admin setuid setgid };
> +allow kismet_t self:capability { net_admin net_raw setuid setgid };
> allow kismet_t self:packet_socket create_socket_perms;
>
> manage_files_pattern(kismet_t, kismet_log_t, kismet_log_t)
>
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
