aboutgitcodebugslistschat
path: root/contrib
diff options
context:
space:
mode:
authorStefano Brivio <sbrivio@redhat.com>2024-09-06 15:24:26 +0200
committerStefano Brivio <sbrivio@redhat.com>2024-09-06 15:34:06 +0200
commit6b38f0723949f8b4b2787ee55d4330249a1a4a3e (patch)
tree9087c345f4a040e75354f13c3168eb64fbff4874 /contrib
parent116bc8266d97d3a3679f9f1c5dc306c834562b48 (diff)
downloadpasst-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.gz
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.bz2
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.lz
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.xz
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.tar.zst
passt-6b38f0723949f8b4b2787ee55d4330249a1a4a3e.zip
apparmor: Allow read access to /proc/sys/net/ipv4/ip_local_port_range2024_09_06.6b38f07
...for both passt and pasta: use passt's abstraction for this. Fixes: eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports") Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib')
-rw-r--r--contrib/apparmor/abstractions/passt2
1 files changed, 2 insertions, 0 deletions
diff --git a/contrib/apparmor/abstractions/passt b/contrib/apparmor/abstractions/passt
index d245115..43fd63f 100644
--- a/contrib/apparmor/abstractions/passt
+++ b/contrib/apparmor/abstractions/passt
@@ -34,6 +34,8 @@
owner @{PROC}/@{pid}/uid_map r, # conf_ugid()
+ @{PROC}/sys/net/ipv4/ip_local_port_range r, # fwd_probe_ephemeral()
+
network netlink raw, # nl_sock_init_do(), netlink.c
network inet stream, # tcp.c