diff options
| author | Boris Ranto <branto@redhat.com> | 2017-03-13 17:51:45 +0100 |
|---|---|---|
| committer | Boris Ranto <branto@redhat.com> | 2017-03-13 17:51:48 +0100 |
| commit | dfd68800716bed644f9969a1194276dce936c09d (patch) | |
| tree | 70ed33669b5ffd553da08f34ebe5ffa871113a31 /selinux | |
| parent | Merge pull request #13919 from dillaman/wip-19256 (diff) | |
| download | ceph-dfd68800716bed644f9969a1194276dce936c09d.tar.xz ceph-dfd68800716bed644f9969a1194276dce936c09d.zip | |
selinux: Allow ceph daemons to read net stats
Fixes: http://tracker.ceph.com/issues/19254
Signed-off-by: Boris Ranto <branto@redhat.com>
Diffstat (limited to 'selinux')
| -rw-r--r-- | selinux/ceph.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/selinux/ceph.te b/selinux/ceph.te index 4eab40d8fc5..5c6bb8ea29f 100644 --- a/selinux/ceph.te +++ b/selinux/ceph.te @@ -58,6 +58,7 @@ manage_files_pattern(ceph_t, ceph_var_run_t, ceph_var_run_t) manage_lnk_files_pattern(ceph_t, ceph_var_run_t, ceph_var_run_t) kernel_read_system_state(ceph_t) +kernel_read_network_state(ceph_t) corenet_all_recvfrom_unlabeled(ceph_t) corenet_all_recvfrom_netlabel(ceph_t) |