aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Zaman <jason@perfinion.com>2015-08-03 02:21:15 +0800
committerJason Zaman <jason@perfinion.com>2015-08-03 03:04:45 +0800
commit017cc90bb5f7acd0d5497b17b24c537d96b5400b (patch)
tree47dd4ab853190652c52dcf68bbbfd0b6011a663f /policy/modules/contrib/subsonic.te
parentA whole slew before master is started correctly (diff)
downloadhardened-refpolicy-017cc90bb5f7acd0d5497b17b24c537d96b5400b.tar.gz
hardened-refpolicy-017cc90bb5f7acd0d5497b17b24c537d96b5400b.tar.bz2
hardened-refpolicy-017cc90bb5f7acd0d5497b17b24c537d96b5400b.zip
subsonic: also needs accept perms on the tcp_socket
otherwise it can bind and listen but not accept
Diffstat (limited to 'policy/modules/contrib/subsonic.te')
-rw-r--r--policy/modules/contrib/subsonic.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/policy/modules/contrib/subsonic.te b/policy/modules/contrib/subsonic.te
index cb0c5ac55..a64a814cb 100644
--- a/policy/modules/contrib/subsonic.te
+++ b/policy/modules/contrib/subsonic.te
@@ -20,7 +20,7 @@ files_pid_file(subsonic_run_t)
# Subsonic local policy
#
-allow subsonic_t self:tcp_socket listen;
+allow subsonic_t self:tcp_socket { listen accept };
java_domain_type(subsonic_t)