From 0c11355e834d542f17073721b6462668680a2c86 Mon Sep 17 00:00:00 2001 From: Stefano Brivio Date: Tue, 21 Feb 2023 18:07:31 +0000 Subject: selinux/passt.te: Allow /etc/resolv.conf symlinks to be followed Signed-off-by: Stefano Brivio --- contrib/selinux/passt.te | 1 + 1 file changed, 1 insertion(+) (limited to 'contrib/selinux/passt.te') diff --git a/contrib/selinux/passt.te b/contrib/selinux/passt.te index 45d56c2..3125d52 100644 --- a/contrib/selinux/passt.te +++ b/contrib/selinux/passt.te @@ -96,6 +96,7 @@ allow passt_t self:cap_userns { setpcap sys_admin sys_ptrace }; allow passt_t proc_net_t:file read; allow passt_t net_conf_t:file { open read }; +allow passt_t net_conf_t:lnk_file read; allow passt_t tmp_t:sock_file { create unlink write }; allow passt_t self:netlink_route_socket { bind create nlmsg_read read write }; -- cgit v1.2.3