Re: [PATCH refpolicy] kernel: remove some unused initial SID contexts

On Sunday, 2 November 2025 12:28:21 AEDT Russell Coker wrote:
> The above is what apparently used to be the policy so it looks like node_t
> is being changed to sysctl_t.

allow sshd_t sysctl_t:tcp_socket node_bind;

I also tried rebooting a VM running that policy (previously I had loaded it on 
a running system) and got the same result with TCP as an additional issue.

Also I tried kernel 6.12.48+deb13-amd64 (the latest kernel for Debian/Trixie 
the latest stable release).

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/