1
0
mirror of https://passt.top/passt synced 2024-07-05 09:15:48 +00:00
passt/contrib/selinux/pasta.if
Stefano Brivio 9f35cf0b11 contrib/selinux: Drop "example" from headers: this is the actual policy
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2023-03-10 20:01:41 +01:00

26 lines
609 B
Plaintext

# SPDX-License-Identifier: AGPL-3.0-or-later
#
# PASTA - Pack A Subtle Tap Abstraction
# for network namespace/tap device mode
#
# contrib/selinux/pasta.if - SELinux profile: Interface File for pasta
#
# Copyright (c) 2022 Red Hat GmbH
# Author: Stefano Brivio <sbrivio@redhat.com>
interface('passt_read_data','
gen_require(`
type passt_data_t;
')
allow $1 passt_t:dir { search add_name };
allow $1 passt_t:file { open read getattr };
')
interface('pasta_read_data','
gen_require(`
type pasta_data_t;
')
allow $1 pasta_t:dir { search add_name };
allow $1 pasta_t:file { open read getattr };
')