passt, pasta: Add examples of SELinux policy modules

These should cover any reasonably common use case in distributions.

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
This commit is contained in:
Stefano Brivio
2022-03-28 11:08:39 +02:00
parent e9d573b14f
commit 1f4b7fa0d7
7 changed files with 364 additions and 0 deletions

13
contrib/selinux/passt.fc Normal file
View File

@@ -0,0 +1,13 @@
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# PASST - Plug A Simple Socket Transport
# for qemu/UNIX domain socket mode
#
# contrib/selinux/passt.fc - SELinux profile example: File Context for passt
#
# Copyright (c) 2022 Red Hat GmbH
# Author: Stefano Brivio <sbrivio@redhat.com>
/usr/bin/passt(\.*)? system_u:object_r:passt_exec_t:s0
/tmp/passt\.pcap system_u:object_r:passt_log_t:s0
/var/run/passt\.pid system_u:object_r:passt_pid_t:s0