aboutgitcodebugslistschat
path: root/contrib/selinux/passt.te
diff options
context:
space:
mode:
authorStefano Brivio <sbrivio@redhat.com>2023-03-06 22:49:39 +0000
committerStefano Brivio <sbrivio@redhat.com>2023-03-09 00:36:08 +0100
commit41bc669866b9e408d8d4966ee06e01784949b98d (patch)
treec9708fad2c331e51a19d385f08403b2289836e3d /contrib/selinux/passt.te
parent009af75e450aae1d4e9e031a9e42a0e74ce1adf7 (diff)
downloadpasst-41bc669866b9e408d8d4966ee06e01784949b98d.tar
passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.gz
passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.bz2
passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.lz
passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.xz
passt-41bc669866b9e408d8d4966ee06e01784949b98d.tar.zst
passt-41bc669866b9e408d8d4966ee06e01784949b98d.zip
contrib/selinux: Let passt write to stdout and stderr when it starts
Otherwise, it's unusable as stand-alone tool, or in foreground mode, and it's also impossible to get output from --help or --version, because for SELinux it's just a daemon. Signed-off-by: Stefano Brivio <sbrivio@redhat.com> Tested-by: Laine Stump <laine@redhat.com> Reviewed-by: Laine Stump <laine@redhat.com>
Diffstat (limited to 'contrib/selinux/passt.te')
-rw-r--r--contrib/selinux/passt.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/contrib/selinux/passt.te b/contrib/selinux/passt.te
index 593b346..6cd61f1 100644
--- a/contrib/selinux/passt.te
+++ b/contrib/selinux/passt.te
@@ -72,6 +72,7 @@ type_transition unconfined_t passt_exec_t : process passt_t;
allow unconfined_t passt_t : process transition ;
init_daemon_domain(passt_t, passt_exec_t)
+term_use_all_inherited_terms(passt_t)
allow passt_t bin_t:file { execute execute_no_trans map };
allow passt_t user_home_dir_t:dir { search add_name write };