]> git.proxmox.com Git - mirror_ovs.git/commit
selinux: update policy to reflect non-root and dpdk support
authorAaron Conole <aconole@redhat.com>
Thu, 31 Aug 2017 23:22:45 +0000 (19:22 -0400)
committerAnsis Atteka <aatteka@ovn.org>
Thu, 31 Aug 2017 23:28:08 +0000 (16:28 -0700)
commit84d2723305064e25402cb89a16bf7ad1aa2cda70
tree20fb7d04a6ac12c50af4b6ec607eb1379bbca3f8
parent8e6681eaa612c70c2afdb4b5a68c18e9cd3940a8
selinux: update policy to reflect non-root and dpdk support

The selinux policy that exists in the repository did not specify access to
all of the resources needed for Open vSwitch to properly function with
an enforcing selinux policy.  This update allows Open vSwitch to operate
with selinux set to Enforcing mode, even while running as a non-root user.

Acked-by: Flavio Leitner <fbl@sysclose.org>
Acked-by: Ansis Atteka <aatteka@ovn.org>
Signed-off-by: Aaron Conole <aconole@redhat.com>
Tested-by: Jean Hsiao <jhsiao@redhat.com>
selinux/openvswitch-custom.te.in