Skip to content

Commit

Permalink
Allow virtqemud relabelfrom also for file and sock_file
Browse files Browse the repository at this point in the history
So far, virtqemud was allowed relabelfrom qemu_var_run_t for the dir
class only.  This commit allows it also for the file and sock_file
classes.

Resolves: RHEL-49763
  • Loading branch information
zpytela committed Aug 26, 2024
1 parent 381cd73 commit 6112821
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion policy/modules/contrib/virt.te
Original file line number Diff line number Diff line change
Expand Up @@ -2101,7 +2101,7 @@ allow virtqemud_t self:tcp_socket create_socket_perms;
allow virtqemud_t self:tun_socket create;
allow virtqemud_t self:udp_socket { connect create getattr };

allow virtqemud_t qemu_var_run_t:dir relabelfrom;
allow virtqemud_t qemu_var_run_t:{ dir file sock_file } relabelfrom;

allow virtqemud_t svirt_t:process { getattr setsched signal signull transition };
allow virtqemud_t svirt_t:unix_stream_socket { connectto create_stream_socket_perms };
Expand Down

0 comments on commit 6112821

Please sign in to comment.