]> git.ipfire.org Git - thirdparty/libvirt.git/commit
selinux: Use fd_path instead of /dev/tap* to get context
authorDominick Grift <dac.override@gmail.com>
Tue, 7 Jan 2020 14:22:30 +0000 (15:22 +0100)
committerDaniel P. Berrangé <berrange@redhat.com>
Tue, 7 Jan 2020 14:44:32 +0000 (14:44 +0000)
commitc0236d1c84ff6c28dacb5791e12caa50523c8881
treee0983e11ba0bd73c4f990581e29b9acde9e1f37a
parenta4877192a1cc6ba1a5975010d8efa84fac5d1845
selinux: Use fd_path instead of /dev/tap* to get context

/dev/tap* is an invalid path but it works with lax policy.
Make it work with more accurate policy as well

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dominick Grift <dac.override@gmail.com>
src/security/security_selinux.c