Skip to content

Commit

Permalink
Allow virtqemud relabelfrom also for file and sock_file
Browse files Browse the repository at this point in the history
So far, virtqemud was allowed relabelfrom qemu_var_run_t for the dir
class only.  This commit allows it also for the file and sock_file
classes.
  • Loading branch information
zpytela committed Aug 13, 2024
1 parent a2911ac commit 137c143
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/contrib/virt.te
Original file line number Diff line number Diff line change
Expand Up @@ -2108,7 +2108,7 @@ allow virtqemud_t self:tcp_socket create_socket_perms;
allow virtqemud_t self:tun_socket create;
allow virtqemud_t self:udp_socket { connect create getattr };

allow virtqemud_t qemu_var_run_t:dir relabelfrom;
allow virtqemud_t qemu_var_run_t:{ dir file sock_file } relabelfrom;

allow virtqemud_t svirt_t:process { getattr setsched signal signull transition };
allow virtqemud_t svirt_t:unix_stream_socket { connectto create_stream_socket_perms };
Expand Down

0 comments on commit 137c143

Please sign in to comment.