diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2024-09-06 15:24:26 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2024-09-06 15:34:06 +0200 |
| commit | 6b38f0723949f8b4b2787ee55d4330249a1a4a3e (patch) | |
| tree | 9087c345f4a040e75354f13c3168eb64fbff4874 | |
| parent | 116bc8266d97d3a3679f9f1c5dc306c834562b48 (diff) | |
| download | passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.gz passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.bz2 passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.lz passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.xz passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.zst passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.zip | |
apparmor: Allow read access to /proc/sys/net/ipv4/ip_local_port_range2024_09_06.6b38f07
...for both passt and pasta: use passt's abstraction for this.
Fixes: eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
| -rw-r--r-- | contrib/apparmor/abstractions/passt | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/contrib/apparmor/abstractions/passt b/contrib/apparmor/abstractions/passt index d245115..43fd63f 100644 --- a/contrib/apparmor/abstractions/passt +++ b/contrib/apparmor/abstractions/passt @@ -34,6 +34,8 @@ owner @{PROC}/@{pid}/uid_map r, # conf_ugid() + @{PROC}/sys/net/ipv4/ip_local_port_range r, # fwd_probe_ephemeral() + network netlink raw, # nl_sock_init_do(), netlink.c network inet stream, # tcp.c |