diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2023-03-06 22:49:39 +0000 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-03-09 00:36:08 +0100 |
| commit | 41bc669866b9e408d8d4966ee06e01784949b98d (patch) | |
| tree | c9708fad2c331e51a19d385f08403b2289836e3d | |
| parent | 009af75e450aae1d4e9e031a9e42a0e74ce1adf7 (diff) | |
| download | passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.gz passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.bz2 passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.lz passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.xz passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.zst passt-41bc669866b9e408d8d4966ee06e01784949b98d.zip | |
contrib/selinux: Let passt write to stdout and stderr when it starts
Otherwise, it's unusable as stand-alone tool, or in foreground mode,
and it's also impossible to get output from --help or --version,
because for SELinux it's just a daemon.
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Tested-by: Laine Stump <laine@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
| -rw-r--r-- | contrib/selinux/passt.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/contrib/selinux/passt.te b/contrib/selinux/passt.te index 593b346..6cd61f1 100644 --- a/contrib/selinux/passt.te +++ b/contrib/selinux/passt.te @@ -72,6 +72,7 @@ type_transition unconfined_t passt_exec_t : process passt_t; allow unconfined_t passt_t : process transition ; init_daemon_domain(passt_t, passt_exec_t) +term_use_all_inherited_terms(passt_t) allow passt_t bin_t:file { execute execute_no_trans map }; allow passt_t user_home_dir_t:dir { search add_name write }; |