aboutgitcodebugslistschat
path: root/contrib/selinux/pasta.if
blob: 149045ac5f1567d0db498f729d03a1be12c6d87a (plain) (tree)
1
2
3
4
5
6




                                            
                                                                      


















                                                    
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# PASTA - Pack A Subtle Tap Abstraction
#  for network namespace/tap device mode
#
# contrib/selinux/pasta.if - SELinux profile: Interface File for pasta
#
# Copyright (c) 2022 Red Hat GmbH
# Author: Stefano Brivio <sbrivio@redhat.com>

interface('passt_read_data','
	gen_require(`
		type passt_data_t;
	')
	allow $1 passt_t:dir { search add_name };
	allow $1 passt_t:file { open read getattr };
')

interface('pasta_read_data','
	gen_require(`
		type pasta_data_t;
	')
	allow $1 pasta_t:dir { search add_name };
	allow $1 pasta_t:file { open read getattr };
')