Merge pull request #2088 from mjg59/pipefs

Extend selinux pipefs permissions
This commit is contained in:
Matthew Garrett 2016-07-22 00:31:31 -07:00 committed by GitHub
commit 8b185bdeac
5 changed files with 1 additions and 1 deletions

View File

@ -32,5 +32,5 @@ diff -u contrib.orig/virt.te contrib/virt.te
+allow svirt_lxc_net_t self:process getpgid;
+allow svirt_lxc_net_t svirt_lxc_file_t:file { entrypoint mounton };
+allow svirt_lxc_net_t var_lib_t:file { entrypoint execute execute_no_trans };
+allow svirt_lxc_net_t kernel_t:fifo_file {read write open };
+allow svirt_lxc_net_t kernel_t:fifo_file { getattr ioctl read write open };
+