Skip to contentSkip to conversation

Allow virtd to read the selinux config

PATCH New Sven Vermeulen 2 participants 2 messages Mar 26, 2012 – Apr 20, 2012

lore
Share & tools
lore

Sven Vermeulen

author
#0 lore raw

PATCH 1/1 Allow virtd to read the selinux config

The virt daemon uses libselinux for its SELinux support, which requires read access to /etc/selinux/config to read the SELINUXTYPE setting (through the selinux_virtual_domain_context_path() call).

Signed-off-by Sven Vermeulen <[email protected]>
---
 virt.te |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
virt.te +1 -0
index 3eca020..01c2197 100644
@@ -286,6 +286,7 @@ modutils_manage_module_config(virtd_t)
 
 logging_send_syslog_msg(virtd_t)
 
+seutil_read_config(virtd_t)
 seutil_read_default_contexts(virtd_t)
 
 sysnet_domtrans_ifconfig(virtd_t)
Signature · 1 line
1.7.3.4
#1 lore raw

PATCH 1/1 Allow virtd to read the selinux config

Quoted 13 lines · Sven Vermeulen

The virt daemon uses libselinux for its SELinux support, which requires read access to /etc/selinux/config to read the SELINUXTYPE setting (through the selinux_virtual_domain_context_path() call).

Signed-off-by Sven Vermeulen <[email protected]>
---
 virt.te |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
virt.te +0 -0
index 3eca020..01c2197 100644

virt.te modutils_manage_module_config(virtd_t) · line 292

Quoted 7 lines
virt.te +1 -0
@@ -286,6 +286,7 @@ modutils_manage_module_config(virtd_t)
 
 logging_send_syslog_msg(virtd_t)
 
+seutil_read_config(virtd_t)
 seutil_read_default_contexts(virtd_t)
 
 sysnet_domtrans_ifconfig(virtd_t)

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com