diff options
| author |   Martin Millnert <martin@millnert.se> | 2020-09-11 01:02:26 +0200 |
|---|---|---|
| committer | Martin Millnert <martin@millnert.se> | 2020-09-11 01:25:08 +0200 |
| commit | 68849350c56b0258d21fc906b09df71a1951f694 (patch) | |
| tree | 5b1df8819bc6853fed82b78cf02b934822d1925a /src/plugins/wireguard/wireguard_output_tun.c | |
| parent | 5f473c0efc9e0ff068273520b058b8ac498dc597 (diff) | |
misc: selinux fixes (packet_socket r/w)
vpp-20.05 on up-to-date Centos 7.8 host with enforcing SELinux fails to
create a host-interface due to two missing SELinux-permissions:
vpp_t self:packet_socket { read write }
This simple patch adds these two permissions. Tested successfully on
local installation.
The steps to reproduce:
$ ip link add vpeer-host type veth peer name vpeer-vpp
vpp# create host-interface name vpeer-vpp
create host-interface: Permission denied (errno 13)
[...]
$ semodule -i vpp-packet-socket.pp
vpp# create host-interface name vpeer-vpp
host-vpeer-vpp
Type: fix
Ticket: VPP-1931
Change-Id: I2b3d92b27b9a9f26aa1c85af2946b15e83e27944
Signed-off-by: Martin Millnert <martin@millnert.se>
Diffstat (limited to 'src/plugins/wireguard/wireguard_output_tun.c')
0 files changed, 0 insertions, 0 deletions