dbus: dontaudit session bus domains the netadmin capability

Signed-off-by: Kenton Groombridge <[email protected]>
SELinuxProject · Aug 7, 2024 · 9f37f86 · 9f37f86
1 parent d9ca32f
commit 9f37f86
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
@@ -294,7 +294,7 @@ optional_policy(`
 # Common session bus local policy
 #
 
-dontaudit session_bus_type self:capability sys_resource;
+dontaudit session_bus_type self:capability { net_admin sys_resource };
 allow session_bus_type self:process { getattr sigkill signal };
 dontaudit session_bus_type self:process { ptrace setrlimit };
 allow session_bus_type self:file rw_inherited_file_perms;