X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=extras%2Fselinux%2Fvpp-custom.te;h=6f183f687ad53810bfb4d1997f02e3fd691e99d1;hb=68849350c56b0258d21fc906b09df71a1951f694;hp=7cc2d55412a7d4dd699ec9c04ebbd869a02ca27a;hpb=5f473c0efc9e0ff068273520b058b8ac498dc597;p=vpp.git

diff --git a/extras/selinux/vpp-custom.te b/extras/selinux/vpp-custom.te
index 7cc2d55412a..6f183f687ad 100644
--- a/extras/selinux/vpp-custom.te
+++ b/extras/selinux/vpp-custom.te
@@ -46,7 +46,7 @@ files_tmp_file(vpp_tmp_t)
 allow vpp_t self:capability { dac_override ipc_lock setgid sys_rawio net_raw sys_admin net_admin chown }; # too benevolent
 dontaudit vpp_t self:capability2 block_suspend;
 allow vpp_t self:process { execmem execstack setsched signal }; # too benevolent
-allow vpp_t self:packet_socket { bind create setopt ioctl map };
+allow vpp_t self:packet_socket { bind create setopt ioctl map read write };
 allow vpp_t self:tun_socket { create relabelto relabelfrom };
 allow vpp_t self:udp_socket { create ioctl };
 allow vpp_t self:unix_dgram_socket { connect create ioctl };