diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2024-05-23 13:14:22 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2024-05-23 16:44:21 +0200 |
| commit | 765eb0bf1651d20ca319eeb8b41ff35f52f2a29c (patch) | |
| tree | a45c9318bb134f6fba7e8efd9ea1aade6b0c0b60 /contrib/apparmor/usr.bin.passt | |
| parent | 0608ec42f2c134b2b72f4939a722ff3433dbaae0 (diff) | |
| download | passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar.gz passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar.bz2 passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar.lz passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar.xz passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.tar.zst passt-765eb0bf1651d20ca319eeb8b41ff35f52f2a29c.zip | |
apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring2024_05_23.765eb0b
Now:
- we don't open the PID file in main() anymore
- PID file and AF_UNIX socket are opened by pidfile_open() and
tap_sock_unix_open()
- write_pidfile() becomes pidfile_write()
Reported-by: Richard W.M. Jones <rjones@redhat.com>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Acked-by: Richard W.M. Jones <rjones@redhat.com>
Diffstat (limited to 'contrib/apparmor/usr.bin.passt')
| -rw-r--r-- | contrib/apparmor/usr.bin.passt | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/contrib/apparmor/usr.bin.passt b/contrib/apparmor/usr.bin.passt index 564f82f..9568189 100644 --- a/contrib/apparmor/usr.bin.passt +++ b/contrib/apparmor/usr.bin.passt @@ -19,9 +19,12 @@ profile passt /usr/bin/passt{,.avx2} { include <abstractions/passt> # Alternatively: include <abstractions/user-tmp> - owner /tmp/** w, # tap_sock_unix_init(), pcap(), - # write_pidfile(), + owner /tmp/** w, # tap_sock_unix_open(), + # tap_sock_unix_init(), pcap(), + # pidfile_open(), + # pidfile_write(), # logfile_init() - owner @{HOME}/** w, # pcap(), write_pidfile() + owner @{HOME}/** w, # pcap(), pidfile_open(), + # pidfile_write() } |