diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2023-08-15 18:22:02 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-08-18 13:18:34 +0200 |
| commit | 479a9e1b4d9b4e426754b44fb767d252ca144e0f (patch) | |
| tree | e77ae25dec9c36ebbb582a75161e3d07325378ad /contrib/selinux/pasta.fc | |
| parent | 5f1fcfffe45f943fdb2dfd530f15185e9f1e416f (diff) | |
| download | passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar.gz passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar.bz2 passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar.lz passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar.xz passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.tar.zst passt-479a9e1b4d9b4e426754b44fb767d252ca144e0f.zip | |
fedora: Install pasta as hard link to ensure SELinux file context match
The Makefile installs symbolic links by default, which actually
worked at some point (not by design) with SELinux, but at least on
recent kernel versions it doesn't anymore: override pasta (and
pasta.avx2) with hard links.
Otherwise, even if the links are labeled as pasta_exec_t, SELinux
will "resolve" them to passt_exec_t, and we'll have pasta running as
passt_t instead of pasta_t.
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Acked-by: Richard W.M. Jones <rjones@redhat.com>
Diffstat (limited to 'contrib/selinux/pasta.fc')
0 files changed, 0 insertions, 0 deletions