Written by: Martin Orr Allow freshclam to connect to polipo proxy Not to be merged upstream, this is just my local set up Index: policy/modules/kernel/corenetwork.te.in =================================================================== --- policy/modules/kernel/corenetwork.te.in.orig +++ policy/modules/kernel/corenetwork.te.in @@ -73,6 +73,9 @@ # type server_packet_t, packet_type, server_packet_type; +# polipo on caligula.martinorr.name +network_port(martinorr_proxy, tcp,8123,s0) + network_port(afs_bos, udp,7007,s0) network_port(afs_fs, tcp,2040,s0, udp,7000,s0, udp,7005,s0) network_port(afs_ka, udp,7004,s0) Index: policy/modules/services/clamav.te =================================================================== --- policy/modules/services/clamav.te.orig +++ policy/modules/services/clamav.te @@ -223,6 +223,7 @@ corenet_tcp_sendrecv_clamd_port(freshclam_t) corenet_tcp_connect_http_port(freshclam_t) corenet_tcp_connect_http_cache_port(freshclam_t) +corenet_tcp_connect_martinorr_proxy_port(freshclam_t) corenet_sendrecv_http_client_packets(freshclam_t) dev_read_rand(freshclam_t)