59702592ab
Also add rules from our policy. Change-Id: I096025c1820f0b51f1abdf249c744cba387e0a65 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
16 lines
454 B
Text
16 lines
454 B
Text
# vpn tunneling protocol manager
|
|
type mtp, domain;
|
|
permissive_or_unconfined(mtp)
|
|
type mtp_exec, exec_type, file_type;
|
|
|
|
init_daemon_domain(mtp)
|
|
net_domain(mtp)
|
|
|
|
# pptp policy
|
|
allow mtp self:tcp_socket create_socket_perms;
|
|
allow mtp self:socket create_socket_perms;
|
|
allow mtp self:rawip_socket create_socket_perms;
|
|
allow mtp self:capability net_raw;
|
|
allow mtp ppp:process signal;
|
|
allow mtp port:tcp_socket name_connect;
|
|
allow mtp vpn_data_file:dir search;
|