[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: Add svirt_t ovirt_t:unix_stream_socket connectto

fabiand at redhat.com fabiand at redhat.com
Fri Mar 27 11:14:56 UTC 2015


Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    https://gerrit.ovirt.org/39262

to review the following change.

Change subject: semodule: Add svirt_t ovirt_t:unix_stream_socket connectto
......................................................................

semodule: Add svirt_t ovirt_t:unix_stream_socket connectto

Without this rule the virtual-machine start returns:
Child quit during startup handshake: Input/output error

Change-Id: Ie841f2a9373ce3fe6ab2042fcc7c5b93c1aab74a
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1204535
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/62/39262/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index d31ebc7..1dd3934 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -235,6 +235,7 @@
 require {
     type bin_t;
 }
+allow svirt_t ovirt_t:unix_stream_socket connectto;
 allow svirt_t initrc_t:unix_stream_socket connectto;
 allow svirt_t sanlock_t:unix_stream_socket connectto;
 allow svirt_t nfs_t:file open;


-- 
To view, visit https://gerrit.ovirt.org/39262
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie841f2a9373ce3fe6ab2042fcc7c5b93c1aab74a
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Fabian Deutsch <fabiand at redhat.com>



More information about the node-patches mailing list