Merge branch 'slfo-1.1-bsc1232655' into 'slfo-1.1'

Allow virt_dbus_t to connect to virtd_t over unix_stream_socket (bsc#1232655) See merge request selinux/selinux-policy!122
openSUSE · Nov 5, 2024 · f85cbd7 · f85cbd7
2 parents 24f674c + 1f3ef02
commit f85cbd7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/contrib/virt.te b/policy/modules/contrib/virt.te
@@ -2535,6 +2535,7 @@ allow virt_dbus_t virt_var_run_t:dir search_dir_perms;
 allow virt_dbus_t virt_var_run_t:sock_file write_sock_file_perms;
 
 # ipc to other virt domains
+allow virt_dbus_t virtd_t:unix_stream_socket connectto;
 allow virt_dbus_t virtproxyd_t:unix_stream_socket connectto;
 allow virt_dbus_t virtqemud_t:unix_stream_socket connectto;
 allow virt_dbus_t virtqemud_var_run_t:sock_file write;