diff --git a/private/netutils_wrapper.te b/private/netutils_wrapper.te index fc01999c9..a773f96f9 100644 --- a/private/netutils_wrapper.te +++ b/private/netutils_wrapper.te @@ -36,6 +36,7 @@ domain_auto_trans({ # suppress spurious denials dontaudit netutils_wrapper self:global_capability_class_set sys_resource; +dontaudit netutils_wrapper sysfs_type:file read; # netutils wrapper may only use the following capabilities. neverallow netutils_wrapper self:global_capability_class_set ~{ net_admin net_raw };