mirrors/passt
1
0
Fork 0
mirror of https://passt.top/passt synced 2025-06-05 15:35:34 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring

Browse source 
Now:
- we don't open the PID file in main() anymore
- PID file and AF_UNIX socket are opened by pidfile_open() and
  tap_sock_unix_open()
- write_pidfile() becomes pidfile_write()

Reported-by: Richard W.M. Jones <rjones@redhat.com>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Acked-by: Richard W.M. Jones <rjones@redhat.com>
This commit is contained in:
Stefano Brivio 2024-05-23 13:14:22 +02:00
parent 0608ec42f2
commit 765eb0bf16
3 changed files with 13 additions and 7 deletions
contrib/apparmor/abstractions
pasta

2
contrib/apparmor/abstractions/pasta
View file

@ -27,7 +27,7 @@
@{PROC}/@{pid}/net/udp r,
@{PROC}/@{pid}/net/udp6 r,
@{run}/user/@{uid}/** rw, # pasta_open_ns(), main()
@{run}/user/@{uid}/** rw, # pasta_open_ns()
@{PROC}/[0-9]*/ns/ r, # pasta_netns_quit_init(),
@{PROC}/[0-9]*/ns/net r, # pasta_wait_for_ns(),