diff --git a/selinux/tabrmd.if b/selinux/tabrmd.if index 61ed3e18..e5e1eb8d 100644 --- a/selinux/tabrmd.if +++ b/selinux/tabrmd.if @@ -2,7 +2,7 @@ ######################################## ## -## Create and use a unix stream socket +## Create a tabrmd unix stream socket ## ## ## @@ -18,6 +18,25 @@ interface(`tabrmd_create_unix_stream_sockets',` allow $1 tabrmd_t:unix_stream_socket create_stream_socket_perms; ') +######################################## +## +## Read and write to +## tabrmd unix stream sockets +## +## +## +## Domain allowed access. +## +## +# +interface(`tabrmd_rw_unix_stream_sockets',` + gen_require(` + type tabrmd_t; + ') + + allow $1 tabrmd_t:unix_stream_socket rw_socket_perms; +') + ######################################## ## ## Send messages to and from