]> git.proxmox.com Git - mirror_ovs.git/commit
selinux: create a transition type for module loading
authorAaron Conole <aconole@redhat.com>
Fri, 1 Jun 2018 18:28:45 +0000 (14:28 -0400)
committerAnsis Atteka <aatteka@ovn.org>
Mon, 18 Jun 2018 02:32:12 +0000 (19:32 -0700)
commit6cd775f423f7a0e841d420d709d5cb69afeb2753
tree882d979f89b35acf320efc02aa2f614f353a6669
parent15117123c53ef35394667bf156842842949aaa47
selinux: create a transition type for module loading

Defines a type 'openvswitch_load_module_t' used exclusively for loading
modules.  This means that the 'openvswitch_t' domain won't require
access to the module loading facility - such access can only happen
after transitioning through the 'openvswitch_load_module_exec_t'
transition context.

A future commit will instruct the selinux policy on how to label the
appropriate script with extended attributes to make use of this new domain.

Acked-by: Ansis Atteka <aatteka@ovn.org>
Acked-by: Timothy Redaelli <tredaelli@redhat.com>
Signed-off-by: Aaron Conole <aconole@redhat.com>
selinux/openvswitch-custom.te.in