passt - Plug A Simple Socket Transport

	Commit message (Collapse)	Author	Age	Files	Lines
*	selinux/passt.te: Allow setting socket option on routing netlink socket	Stefano Brivio	2023-02-21	1	-1/+1
\| \| \| \|	Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	selinux/passt.te: Allow /etc/resolv.conf symlinks to be followed	Stefano Brivio	2023-02-21	1	-0/+1
\| \| \| \|	Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	selinux/passt.te: Allow setcap on the process itself	Stefano Brivio	2023-02-21	1	-0/+1
\| \| \| \| \| \| \|	This is needed by the new functions in isolate.c, add the corresponding rule. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	selinux: Switch to a more reasonable model for PID and socket files	Stefano Brivio	2023-02-21	1	-4/+7
\| \| \| \| \| \| \| \|	Instead of restricting PID files to /var/run/passt.pid, which is a single file and unlikely to be used, use the user_tmp_t type which should cover any reasonable need. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	selinux: Define interfaces for libvirt and similar frameworks	Stefano Brivio	2023-02-21	1	-0/+1
\| \| \| \| \| \| \| \| \| \|	Services running passt will commonly need to transition to its domain, terminate it, connect and write to its socket. The init_daemon_domain() macro now defines the default transition to the passt_t domain, using the passt_exec_t type. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	passt, pasta: Add examples of SELinux policy modules	Stefano Brivio	2022-03-29	1	-0/+111
	These should cover any reasonably common use case in distributions. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>