diff --git a/qm.if b/qm.if index 2a53b729..b16e7630 100644 --- a/qm.if +++ b/qm.if @@ -173,6 +173,8 @@ template(`qm_domain_template',` allow $1_t sysctl_irq_t:dir { getattr mounton }; allow $1_t sysctl_t:file { getattr mounton }; + corecmd_entrypoint_all_executables($1_t) + corenet_icmp_bind_generic_node($1_t) corenet_raw_bind_generic_node($1_t) corenet_rw_tun_tap_dev($1_t) diff --git a/qm.te b/qm.te index 93b3cf03..ae4c9ed4 100644 --- a/qm.te +++ b/qm.te @@ -1,3 +1,3 @@ -policy_module(qm, 0.1.0) +policy_module(qm, 0.1.1) qm_domain_template(qm)