1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
| | # SPDX-License-Identifier: AGPL-3.0-or-later
#
# PASTA - Pack A Subtle Tap Abstraction
# for network namespace/tap device mode
#
# contrib/selinux/pasta.if - SELinux profile example: Interface File for pasta
#
# Copyright (c) 2022 Red Hat GmbH
# Author: Stefano Brivio <sbrivio@redhat.com>
interface('passt_read_data','
gen_require(`
type passt_data_t;
')
allow $1 passt_t:dir { search add_name };
allow $1 passt_t:file { open read getattr };
')
interface('pasta_read_data','
gen_require(`
type pasta_data_t;
')
allow $1 pasta_t:dir { search add_name };
allow $1 pasta_t:file { open read getattr };
')
|