|Main Archive Page > Month Archives > selinux archives|
Add the new "tun_socket" class to the flask definitions. The "tun_socket" object class is used by the new TUN driver hooks which allow policy to control access to TUN/TAP devices. --- policy/flask/access_vectors | 2 ++ policy/flask/security_classes | 2 ++ 2 files changed, 4 insertions(+), 0 deletions(-) diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors index ef4c063..6292db5 100644 --- a/policy/flask/access_vectors
@@ -251,6 +251,8 @@ inherits socket class unix_dgram_socket inherits socket
# # Define the access vector interpretation for process-related objects diff --git a/policy/flask/security_classes b/policy/flask/security_classes index 9e1bf1a..2bd1bf6 100644 --- a/policy/flask/security_classes
@@ -119,4 +119,6 @@ class x_application_data # userspace # kernel services that need to override task security, e.g. cachefiles class kernel_service
# FLASK -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to firstname.lastname@example.org with the words "unsubscribe selinux" without quotes as the message.