diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2023-02-21 18:03:49 +0000 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-02-21 19:12:37 +0100 |
| commit | 01801b131f21f126b341f0db069727d6f9bd8d2e (patch) | |
| tree | 01f45a287c63686b2b93bc7976ed6f38ab6ded7d /contrib/selinux/passt.fc | |
| parent | 49024476309df1f6f32f34c40e793592687c9f26 (diff) | |
| download | passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar.gz passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar.bz2 passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar.lz passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar.xz passt-01801b131f21f126b341f0db069727d6f9bd8d2e.tar.zst passt-01801b131f21f126b341f0db069727d6f9bd8d2e.zip | |
selinux: Switch to a more reasonable model for PID and socket files
Instead of restricting PID files to /var/run/passt.pid, which is a
single file and unlikely to be used, use the user_tmp_t type which
should cover any reasonable need.
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib/selinux/passt.fc')
| -rw-r--r-- | contrib/selinux/passt.fc | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/contrib/selinux/passt.fc b/contrib/selinux/passt.fc index 4638200..286c868 100644 --- a/contrib/selinux/passt.fc +++ b/contrib/selinux/passt.fc @@ -10,4 +10,3 @@ /usr/bin/passt(\.*)? system_u:object_r:passt_exec_t:s0 /tmp/passt\.pcap system_u:object_r:passt_log_t:s0 -/var/run/passt\.pid system_u:object_r:passt_pid_t:s0 |