From ac260c269435bcdc2bcfd16b4f51e497a16f4e3f Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Wed, 17 Feb 2021 17:24:14 +0100 Subject: [PATCH] Allow rhsmcertd bind tcp sockets to a generic node --- policy/modules/contrib/rhsmcertd.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/contrib/rhsmcertd.te b/policy/modules/contrib/rhsmcertd.te index c7c7b9e37f..6d937ba927 100644 --- a/policy/modules/contrib/rhsmcertd.te +++ b/policy/modules/contrib/rhsmcertd.te @@ -69,6 +69,7 @@ kernel_read_system_state(rhsmcertd_t) kernel_read_sysctl(rhsmcertd_t) kernel_signull(rhsmcertd_t) +corenet_tcp_bind_generic_node(rhsmcertd_t) corenet_tcp_connect_http_port(rhsmcertd_t) corenet_tcp_connect_http_cache_port(rhsmcertd_t) corenet_tcp_connect_squid_port(rhsmcertd_t)