From 933aa1014bb9012fa20974945502c6687beaaebe Mon Sep 17 00:00:00 2001 From: Stefano Brivio Date: Tue, 21 Feb 2023 18:09:23 +0000 Subject: selinux/passt.te: Allow setting socket option on routing netlink socket Signed-off-by: Stefano Brivio --- contrib/selinux/passt.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'contrib/selinux/passt.te') diff --git a/contrib/selinux/passt.te b/contrib/selinux/passt.te index 3125d52..7fa4fb9 100644 --- a/contrib/selinux/passt.te +++ b/contrib/selinux/passt.te @@ -98,7 +98,7 @@ allow passt_t proc_net_t:file read; allow passt_t net_conf_t:file { open read }; allow passt_t net_conf_t:lnk_file read; allow passt_t tmp_t:sock_file { create unlink write }; -allow passt_t self:netlink_route_socket { bind create nlmsg_read read write }; +allow passt_t self:netlink_route_socket { bind create nlmsg_read read write setopt }; allow passt_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_node(passt_t) -- cgit v1.2.3