2022-03-28 11:08:39 +02:00
|
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
|
#
|
|
|
|
|
# PASTA - Pack A Subtle Tap Abstraction
|
|
|
|
|
# for network namespace/tap device mode
|
|
|
|
|
#
|
2023-03-10 15:53:14 +01:00
|
|
|
# contrib/selinux/pasta.if - SELinux profile: Interface File for pasta
|
2022-03-28 11:08:39 +02:00
|
|
|
#
|
|
|
|
|
# Copyright (c) 2022 Red Hat GmbH
|
|
|
|
|
# Author: Stefano Brivio <sbrivio@redhat.com>
|
|
|
|
|
|
|
|
|
|
interface('passt_read_data','
|
|
|
|
|
gen_require(`
|
|
|
|
|
type passt_data_t;
|
|
|
|
|
')
|
|
|
|
|
allow $1 passt_t:dir { search add_name };
|
|
|
|
|
allow $1 passt_t:file { open read getattr };
|
|
|
|
|
')
|
|
|
|
|
|
|
|
|
|
interface('pasta_read_data','
|
|
|
|
|
gen_require(`
|
|
|
|
|
type pasta_data_t;
|
|
|
|
|
')
|
|
|
|
|
allow $1 pasta_t:dir { search add_name };
|
|
|
|
|
allow $1 pasta_t:file { open read getattr };
|
|
|
|
|
')
|
