diff --git a/games.te b/games.te index 0c08250..b617af4 100644 --- a/games.te +++ b/games.te @@ -1,4 +1,4 @@ -policy_module(games, 2.2.1) +policy_module(games, 2.2.2) ######################################## # @@ -96,13 +96,12 @@ optional_policy(` # allow games_t self:sem create_sem_perms; -allow games_t self:tcp_socket create_stream_socket_perms; -allow games_t self:udp_socket create_socket_perms; +allow games_t self:tcp_socket { accept listen }; manage_files_pattern(games_t, games_data_t, games_data_t) manage_lnk_files_pattern(games_t, games_data_t, games_data_t) -allow games_t games_devpts_t:chr_file { rw_chr_file_perms setattr }; +allow games_t games_devpts_t:chr_file { rw_chr_file_perms setattr_chr_file_perms }; term_create_pty(games_t, games_devpts_t) manage_dirs_pattern(games_t, games_tmp_t, games_tmp_t) @@ -154,7 +153,7 @@ logging_dontaudit_search_logs(games_t) miscfiles_read_man_pages(games_t) miscfiles_read_localization(games_t) -sysnet_read_config(games_t) +sysnet_dns_name_resolve(games_t) userdom_manage_user_tmp_dirs(games_t) userdom_manage_user_tmp_files(games_t)