Stefano Brivio 116bc8266d selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range ... Since commit eedc81b6ef ("fwd, conf: Probe host's ephemeral ports"), we might need to read from /proc/sys/net/ipv4/ip_local_port_range in both passt and pasta. While pasta was already allowed to open and write /proc/sys/net entries, read access was missing in SELinux's type enforcement: add that. In passt, instead, this is the first time we need to access an entry there: add everything we need. Fixes: eedc81b6ef ("fwd, conf: Probe host's ephemeral ports") Signed-off-by: Stefano Brivio <sbrivio@redhat.com>		2024-09-06 15:34:06 +02:00
..
passt.fc	selinux: Use explicit paths for binaries in file context	2023-08-18 13:18:45 +02:00
passt.if	passt: Relicense to GPL 2.0, or any later version	2023-04-06 18:00:33 +02:00
passt.te	selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range	2024-09-06 15:34:06 +02:00
pasta.fc	selinux: Use explicit paths for binaries in file context	2023-08-18 13:18:45 +02:00
pasta.te	selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range	2024-09-06 15:34:06 +02:00