Stefano Brivio 116bc8266d selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range ...

Since commit eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports"),
we might need to read from /proc/sys/net/ipv4/ip_local_port_range in
both passt and pasta.

While pasta was already allowed to open and write /proc/sys/net
entries, read access was missing in SELinux's type enforcement: add
that.

In passt, instead, this is the first time we need to access an entry
there: add everything we need.

Fixes: eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>

2024-09-06 15:34:06 +02:00

..

passt.fc

selinux: Use explicit paths for binaries in file context

2023-08-18 13:18:45 +02:00

passt.if

passt: Relicense to GPL 2.0, or any later version

2023-04-06 18:00:33 +02:00

passt.te

selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range

2024-09-06 15:34:06 +02:00

pasta.fc

selinux: Use explicit paths for binaries in file context

2023-08-18 13:18:45 +02:00

pasta.te

selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range

2024-09-06 15:34:06 +02:00