Add missing SELinux permissions for sriov

Signed-off-by: Jed Lejosne <[email protected]>
alicefr · May 11, 2020 · 738de71 · 738de71
1 parent 3440e09
commit 738de71
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cmd/virt-handler/virt_launcher.cil b/cmd/virt-handler/virt_launcher.cil
@@ -4,4 +4,5 @@
     (typeattributeset mcs_constrained_type (process))
     (allow process self (tun_socket (relabelfrom relabelto attach_queue)))
     (allow process hugetlbfs_t (dir (add_name create write remove_name rmdir setattr)))
-    (allow process hugetlbfs_t (file (create unlink))))
+    (allow process hugetlbfs_t (file (create unlink)))
+    (allow process sysfs_t (file (write))))