| Bjoern Johansson | 3c4b342 | 2017-07-06 15:52:57 -0700 | [diff] [blame] | 1 | # DHCP client |
| Bjoern Johansson | 760871c | 2017-08-31 12:57:18 -0700 | [diff] [blame] | 2 | type dhcpclient, domain; |
| 3 | type dhcpclient_exec, exec_type, vendor_file_type, file_type; |
| Bjoern Johansson | 3c4b342 | 2017-07-06 15:52:57 -0700 | [diff] [blame] | 4 | |
| 5 | init_daemon_domain(dhcpclient) |
| 6 | net_domain(dhcpclient) |
| 7 | |
| 8 | allow dhcpclient execns:fd use; |
| 9 | |
| 10 | set_prop(dhcpclient, net_eth0_prop); |
| 11 | allow dhcpclient self:capability { net_admin net_raw }; |
| Bjoern Johansson | 760871c | 2017-08-31 12:57:18 -0700 | [diff] [blame] | 12 | allow dhcpclient self:udp_socket create; |
| Bjoern Johansson | 3c4b342 | 2017-07-06 15:52:57 -0700 | [diff] [blame] | 13 | allow dhcpclient self:netlink_route_socket { write nlmsg_write }; |
| 14 | allow dhcpclient varrun_file:dir search; |
| Bjoern Johansson | 760871c | 2017-08-31 12:57:18 -0700 | [diff] [blame] | 15 | allow dhcpclient self:packet_socket { create bind write read }; |
| 16 | allowxperm dhcpclient self:udp_socket ioctl { SIOCSIFFLAGS |
| 17 | SIOCSIFADDR |
| 18 | SIOCSIFNETMASK |
| 19 | SIOCSIFMTU |
| 20 | SIOCGIFHWADDR }; |