From 0aa542f22898f3499dac70d090ac34d37f531249 Mon Sep 17 00:00:00 2001 From: Mykola Solianko Date: Thu, 27 Jun 2024 09:59:50 +0300 Subject: [PATCH] [sysnetwork] Allow ifconfig_t to execute busybox Signed-off-by: Mykola Solianko --- policy/modules/system/sysnetwork.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/system/sysnetwork.te b/policy/modules/system/sysnetwork.te index d836703ccd..5c09babb54 100644 --- a/policy/modules/system/sysnetwork.te +++ b/policy/modules/system/sysnetwork.te @@ -332,6 +332,7 @@ kernel_search_network_sysctl(ifconfig_t) kernel_rw_net_sysctls(ifconfig_t) corenet_rw_tun_tap_dev(ifconfig_t) +corecmd_exec_bin(ifconfig_t) dev_read_sysfs(ifconfig_t) dev_dontaudit_rw_cardmgr(ifconfig_t)