From 6008a54185af7f6fafce8f00ce1f588cafbdb026 Mon Sep 17 00:00:00 2001 From: Zdenek Pytela Date: Tue, 17 Sep 2024 10:52:01 +0200 Subject: [PATCH] Label /usr/bin/noping and /usr/bin/oping with ping_exec_t These commands are provided by the liboping package. Resolves: rhbz#2305961 --- policy/modules/admin/netutils.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/admin/netutils.fc b/policy/modules/admin/netutils.fc index e9d741c244..fc60184020 100644 --- a/policy/modules/admin/netutils.fc +++ b/policy/modules/admin/netutils.fc @@ -7,6 +7,7 @@ /usr/bin/lft -- gen_context(system_u:object_r:traceroute_exec_t,s0) /usr/bin/mtr -- gen_context(system_u:object_r:traceroute_exec_t,s0) /usr/bin/nmap -- gen_context(system_u:object_r:traceroute_exec_t,s0) +/usr/bin/n?oping -- gen_context(system_u:object_r:ping_exec_t,s0) /usr/bin/ping.* -- gen_context(system_u:object_r:ping_exec_t,s0) /usr/bin/send_arp -- gen_context(system_u:object_r:ping_exec_t,s0) /usr/bin/tcpdump -- gen_context(system_u:object_r:netutils_exec_t,s0)