[PATCH 2/4] REFPOL: Add forwarding permissions to the packet object class

[paul.moore@hp.com]

Add the 'forward_in' and 'forward_out' permissions to the packet object class
to support the new forwarding controls added to the 2.6.25 kernel.

Signed-off-by: Paul Moore <paul.moore@hp.com>
---
 policy/flask/access_vectors |    2 ++
 1 file changed, 2 insertions(+)

Index: refpolicy_svn_repo/policy/flask/access_vectors
===================================================================
--- refpolicy_svn_repo.orig/policy/flask/access_vectors
+++ refpolicy_svn_repo/policy/flask/access_vectors
@@ -652,6 +652,8 @@ class packet
 	relabelto
 	flow_in		# not currently in use
 	flow_out	# not currently in use
+	forward_in
+	forward_out
 }
 
 class key

-- 
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.