Update ktlsh policy

zpytela · Dec 17, 2024 · 0d528ae · 0d528ae
1 parent a152f54
commit 0d528ae
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/policy/modules/contrib/ktls.te b/policy/modules/contrib/ktls.te
@@ -11,3 +11,9 @@ init_daemon_domain(ktlshd_t, ktlshd_exec_t)
 
 permissive ktlshd_t;
 
+allow ktlshd_t self:netlink_generic_socket create_socket_perms;
+allow ktlshd_t self:unix_dgram_socket create_socket_perms;
+
+optional_policy(`
+	logging_send_syslog_msg(ktlshd_t)
+')