diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2024-09-06 15:19:20 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2024-09-06 15:34:06 +0200 |
| commit | 116bc8266d97d3a3679f9f1c5dc306c834562b48 (patch) | |
| tree | 523da6d769f3638595cdc6da9efef6dbdaac4e6a /pif.c | |
| parent | a33ecafbd921a681ef65b66624625a1beac43c50 (diff) | |
| download | passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar.gz passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar.bz2 passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar.lz passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar.xz passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.tar.zst passt-116bc8266d97d3a3679f9f1c5dc306c834562b48.zip | |
selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
Since commit eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports"),
we might need to read from /proc/sys/net/ipv4/ip_local_port_range in
both passt and pasta.
While pasta was already allowed to open and write /proc/sys/net
entries, read access was missing in SELinux's type enforcement: add
that.
In passt, instead, this is the first time we need to access an entry
there: add everything we need.
Fixes: eedc81b6ef55 ("fwd, conf: Probe host's ephemeral ports")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'pif.c')
0 files changed, 0 insertions, 0 deletions