Virtual Distributed Ethernet

This patchset introduces VDE, the Virtual Distributed Ethernet application, which allows administrators to create virtual networks for qemu.

Changes since first version:
- coding style fixes
- remove a test paragraph that was wrongly included

Wkr,
Sven Vermeulen

VDE, or Virtual Distributed Ethernet, is a process that simulates a hub/switch within a virtual network. It can be used to provide both simple and complex network environments within a virtual scope.

We introduce the vde_t domain (and related types) here, and will later patch qemu to (optionally) use VDE

---
 vde.fc |   20 ++++++++++++++++++++
 vde.if |   61 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 vde.te |   54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 135 insertions(+), 0 deletions(-)
 create mode 100644 vde.fc
 create mode 100644 vde.if
 create mode 100644 vde.te

new file mode 100644
index 0000000..28b75dd
@@ -0,0 +1,20 @@
+#
+# /etc
+#
+/etc/init.d/vde		--	gen_context(system_u:object_r:vde_initrc_exec_t,s0)
+
+#
+# /usr
+#
+/usr/bin/vde_switch	--	gen_context(system_u:object_r:vde_exec_t,s0)
+/usr/sbin/vde_tunctl	--	gen_context(system_u:object_r:vde_exec_t,s0)
+
+#
+# /var
+#
+/var/run/vde\.ctl(/.*)?		gen_context(system_u:object_r:vde_var_run_t,s0)
+
+#
+# /tmp
+#
+/tmp/vde.[0-9-]*	-s	gen_context(system_u:object_r:vde_tmp_t,s0)

1.7.3.4

Optionally allow qemu to connect to the vde switch

---
 qemu.te |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

index 9cf9992..f9abc5e 100644
@@ -99,6 +99,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	vde_connect(qemu_t)
+')
+
+optional_policy(`
 	virt_manage_images(qemu_t)
 	virt_append_log(qemu_t)
 ')

1.7.3.4

Assign the vde_role to sysadm_r so that the system administrator can manage virtual distributed ethernet process(es).

---
 policy/modules/roles/sysadm.te |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

index 954417f..0e09153 100644
@@ -386,6 +386,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	vde_role(sysadm_r, sysadm_t)
+')
+
+optional_policy(`
 	vmware_role(sysadm_r, sysadm_t)
 ')
 

1.7.3.4