36 lines
1.4 KiB
Diff
36 lines
1.4 KiB
Diff
diff --git checkpolicy-2.5/ChangeLog checkpolicy-2.5/ChangeLog
|
|
index dfe4908..51b99cd 100644
|
|
--- checkpolicy-2.5/ChangeLog
|
|
+++ checkpolicy-2.5/ChangeLog
|
|
@@ -1,3 +1,4 @@
|
|
+ * Add support for portcon dccp protocol, from Richard Haines
|
|
2.5 2016-02-23
|
|
* Add neverallow support for ioctl extended permissions, from Jeff Vander Stoep.
|
|
* fix double free on name-based type transitions, from Stephen Smalley.
|
|
diff --git checkpolicy-2.5/checkpolicy.c checkpolicy-2.5/checkpolicy.c
|
|
index 9da661e..ea9ee00 100644
|
|
--- checkpolicy-2.5/checkpolicy.c
|
|
+++ checkpolicy-2.5/checkpolicy.c
|
|
@@ -919,6 +919,8 @@ int main(int argc, char **argv)
|
|
protocol = IPPROTO_TCP;
|
|
else if (!strcmp(ans, "udp") || !strcmp(ans, "UDP"))
|
|
protocol = IPPROTO_UDP;
|
|
+ else if (!strcmp(ans, "dccp") || !strcmp(ans, "DCCP"))
|
|
+ protocol = IPPROTO_DCCP;
|
|
else {
|
|
printf("unknown protocol\n");
|
|
break;
|
|
diff --git checkpolicy-2.5/policy_define.c checkpolicy-2.5/policy_define.c
|
|
index ee20fea..7a4d2f1 100644
|
|
--- checkpolicy-2.5/policy_define.c
|
|
+++ checkpolicy-2.5/policy_define.c
|
|
@@ -4876,6 +4876,8 @@ int define_port_context(unsigned int low, unsigned int high)
|
|
protocol = IPPROTO_TCP;
|
|
} else if ((strcmp(id, "udp") == 0) || (strcmp(id, "UDP") == 0)) {
|
|
protocol = IPPROTO_UDP;
|
|
+ } else if ((strcmp(id, "dccp") == 0) || (strcmp(id, "DCCP") == 0)) {
|
|
+ protocol = IPPROTO_DCCP;
|
|
} else {
|
|
yyerror2("unrecognized protocol %s", id);
|
|
free(newc);
|