aboutsummaryrefslogtreecommitdiffstats
path: root/dnsmasq.te
diff options
context:
space:
mode:
Diffstat (limited to 'dnsmasq.te')
-rw-r--r--dnsmasq.te5
1 files changed, 2 insertions, 3 deletions
diff --git a/dnsmasq.te b/dnsmasq.te
index 0e16580..fcf7c6d 100644
--- a/dnsmasq.te
+++ b/dnsmasq.te
@@ -3,10 +3,9 @@ type dnsmasq, domain;
permissive_or_unconfined(dnsmasq)
type dnsmasq_exec, exec_type, file_type;
+net_domain(dnsmasq)
+
allow dnsmasq self:capability { net_bind_service setgid setuid };
-allow dnsmasq self:tcp_socket create_socket_perms;
allow dnsmasq dhcp_data_file:dir w_dir_perms;
allow dnsmasq dhcp_data_file:file create_file_perms;
-allow dnsmasq port:tcp_socket name_bind;
-allow dnsmasq node:tcp_socket node_bind;