passt/contrib
Stefano Brivio 116bc8266d selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range
Since commit eedc81b6ef ("fwd, conf: Probe host's ephemeral ports"),
we might need to read from /proc/sys/net/ipv4/ip_local_port_range in
both passt and pasta.

While pasta was already allowed to open and write /proc/sys/net
entries, read access was missing in SELinux's type enforcement: add
that.

In passt, instead, this is the first time we need to access an entry
there: add everything we need.

Fixes: eedc81b6ef ("fwd, conf: Probe host's ephemeral ports")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2024-09-06 15:34:06 +02:00
..
apparmor apparmor: Fix comments after PID file and AF_UNIX socket creation refactoring 2024-05-23 16:44:21 +02:00
fedora fedora/rpkg: List myself as author for changelog entries 2024-07-26 16:40:41 +02:00
kata-containers Don't abbreviate ip(8) arguments in examples and tests 2022-06-15 09:38:10 +02:00
selinux selinux: Allow read access to /proc/sys/net/ipv4/ip_local_port_range 2024-09-06 15:34:06 +02:00