diff --git a/pam_duo/authlogin_duo.te b/pam_duo/authlogin_duo.te index 21b2d98..9a1720a 100644 --- a/pam_duo/authlogin_duo.te +++ b/pam_duo/authlogin_duo.te @@ -27,14 +27,15 @@ gen_require(` type http_cache_port_t; type http_port_t; type local_login_t; + type squid_port_t; type sshd_t; class tcp_socket name_connect; ') tunable_policy(`pam_duo_permit_sshd',` - allow sshd_t {http_port_t http_cache_port_t}:tcp_socket name_connect; + allow sshd_t {http_port_t http_cache_port_t squid_port_t}:tcp_socket name_connect; ') tunable_policy(`pam_duo_permit_local_login',` - allow local_login_t {http_port_t http_cache_port_t}:tcp_socket name_connect; + allow local_login_t {http_port_t http_cache_port_t squid_port_t}:tcp_socket name_connect; ')