New permission added to Linux 3.8 via the new multiqueue TUN device. Signed-off-by: Paul Moore <pmoore@xxxxxxxxxx> --- policy/flask/access_vectors | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors index 28802c5..a94b169 100644 --- a/policy/flask/access_vectors +++ b/policy/flask/access_vectors @@ -827,6 +827,9 @@ class kernel_service class tun_socket inherits socket +{ + attach_queue +} class x_pointer inherits x_device -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.