Allow rhsmcertd bind tcp sockets to a generic node

fedora-selinux · Feb 17, 2021 · ac260c2 · ac260c2
1 parent b476d1d
commit ac260c2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/contrib/rhsmcertd.te b/policy/modules/contrib/rhsmcertd.te
@@ -69,6 +69,7 @@ kernel_read_system_state(rhsmcertd_t)
 kernel_read_sysctl(rhsmcertd_t)
 kernel_signull(rhsmcertd_t)
 
+corenet_tcp_bind_generic_node(rhsmcertd_t)
 corenet_tcp_connect_http_port(rhsmcertd_t)
 corenet_tcp_connect_http_cache_port(rhsmcertd_t)
 corenet_tcp_connect_squid_port(rhsmcertd_t)