aboutgitcodebugslistschat
path: root/contrib/selinux/pasta.te
diff options
context:
space:
mode:
authorDerek Schrock <dereks@lifeofadishwasher.com>2024-05-26 18:28:42 -0400
committerStefano Brivio <sbrivio@redhat.com>2024-06-07 20:44:44 +0200
commit8a83b530feeac1a9812fe457e86257430f6b2fed (patch)
tree2ca3876684e3af4e8ce77932a038ba947a3c4e2c /contrib/selinux/pasta.te
parentec416fdcc4b607583e87bbdd35b48f6eb9dc633f (diff)
downloadpasst-8a83b530feeac1a9812fe457e86257430f6b2fed.tar
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.tar.gz
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.tar.bz2
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.tar.lz
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.tar.xz
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.tar.zst
passt-8a83b530feeac1a9812fe457e86257430f6b2fed.zip
selinux: Allow access to user_devpts2024_06_07.8a83b53
Allow access to user_devpts. $ pasta --version pasta 0^20240510.g7288448-1.fc40.x86_64 ... $ awk '' < /dev/null $ pasta --version $ While this might be a awk bug it appears pasta should still have access to devpts. Signed-off-by: Derek Schrock <dereks@lifeofadishwasher.com> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib/selinux/pasta.te')
-rw-r--r--contrib/selinux/pasta.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/contrib/selinux/pasta.te b/contrib/selinux/pasta.te
index 0ceda06..4e36c3f 100644
--- a/contrib/selinux/pasta.te
+++ b/contrib/selinux/pasta.te
@@ -211,3 +211,4 @@ allow pasta_t ifconfig_t:process { noatsecure rlimitinh siginh };
allow pasta_t netutils_t:process { noatsecure rlimitinh siginh };
allow pasta_t ping_t:process { noatsecure rlimitinh siginh };
allow pasta_t user_tty_device_t:chr_file { append read write };
+allow pasta_t user_devpts_t:chr_file { append read write };