mir/ovs
2
0
Fork 0
mirror of https://github.com/openvswitch/ovs synced 2025-08-22 01:51:26 +00:00
Code Issues Releases Wiki Activity

selinux: Add missing permissions for netlink_rdma_socket.

Browse Source 
After testing with DPDK found netlink_rdma_socket missing
permissions 'getattr' and 'getopt' in the audit logs.

Signed-off-by: Roi Dayan <roid@nvidia.com>
Signed-off-by: Aaron Conole <aconole@redhat.com>
This commit is contained in:
Roi Dayan 2024-10-06 13:45:46 +03:00 committed by Aaron Conole
parent 4459918386
commit 58c66c1900
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
selinux/openvswitch-custom.te.in
View File

@ -52,7 +52,7 @@ require {
class netlink_audit_socket { create nlmsg_relay read write };
class netlink_netfilter_socket { create read write };
@begin_dpdk@
class netlink_rdma_socket { setopt bind create };
class netlink_rdma_socket { setopt getattr getopt bind create };
@end_dpdk@
class netlink_socket { setopt getopt create connect getattr write read };
class sock_file { write };
@ -82,7 +82,7 @@ allow openvswitch_t self:capability { dac_override audit_write net_broadcast net
allow openvswitch_t self:netlink_audit_socket { create nlmsg_relay read write };
allow openvswitch_t self:netlink_netfilter_socket { create read write };
@begin_dpdk@
allow openvswitch_t self:netlink_rdma_socket { setopt bind create };
allow openvswitch_t self:netlink_rdma_socket { setopt getattr getopt bind create };
@end_dpdk@
allow openvswitch_t self:netlink_socket { setopt getopt create connect getattr write read };