Allow sysadm_t to create PF_KEY sockets

This is needed to run selinux-testsuite as sysadm_t starting with: SELinuxProject/selinux-testsuite@a9e631f Signed-off-by: Ondrej Mosnacek <[email protected]>
fedora-selinux · Sep 4, 2024 · 1559079 · 1559079
1 parent 8346b7b
commit 1559079
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te
@@ -15,6 +15,7 @@ allow sysadm_t self:netlink_generic_socket create_socket_perms;
 allow sysadm_t self:tipc_socket create_socket_perms;
 allow sysadm_t self:sctp_socket create_socket_perms;
 allow sysadm_t self:rawip_socket create_socket_perms;
+allow sysadm_t self:key_socket create_socket_perms;
 
 allow sysadm_t self:system all_system_perms;