Merge branch 'bsc1232655' into 'factory'

Allow virt_dbus_t to connect to virtd_t over unix_stream_socket (bsc#1232655) See merge request selinux/selinux-policy!120
openSUSE · Nov 5, 2024 · 6e8cf2b · 6e8cf2b
2 parents 31a8b05 + 610a86f
commit 6e8cf2b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/contrib/virt.te b/policy/modules/contrib/virt.te
@@ -2582,6 +2582,7 @@ allow virt_dbus_t virt_var_run_t:dir search_dir_perms;
 allow virt_dbus_t virt_var_run_t:sock_file write_sock_file_perms;
 
 # ipc to other virt domains
+allow virt_dbus_t virtd_t:unix_stream_socket connectto;
 allow virt_dbus_t virtproxyd_t:unix_stream_socket connectto;
 allow virt_dbus_t virtqemud_t:unix_stream_socket connectto;
 allow virt_dbus_t virtqemud_var_run_t:sock_file write;