[ovs-dev] [PATCH] selinux: include the svirt_t type
Aaron Conole
aconole at redhat.com
Tue Feb 27 14:21:52 UTC 2018
The dpdk policy adds support for interacting with libvirt, but failed
to include the appropriate svirt_t type. This results in an error
like:
openvswitch-custom.te:53:ERROR 'unknown type svirt_t' at token ';' on line 1060:
Reported-by: Guoshuai Li <ligs at dtdream.com>
Signed-off-by: Aaron Conole <aconole at redhat.com>
---
NOTE: Apologies. I was working on a domain transition script and
completely forgot to re-run the testing with dpdk enabled.
selinux/openvswitch-custom.te.in | 1 +
1 file changed, 1 insertion(+)
diff --git a/selinux/openvswitch-custom.te.in b/selinux/openvswitch-custom.te.in
index 7b9c1c7a0..db3cf6d8d 100644
--- a/selinux/openvswitch-custom.te.in
+++ b/selinux/openvswitch-custom.te.in
@@ -13,6 +13,7 @@ require {
@begin_dpdk@
type hugetlbfs_t;
type kernel_t;
+ type svirt_t;
type svirt_image_t;
type svirt_tmpfs_t;
type vfio_device_t;
--
2.14.3
More information about the dev
mailing list