Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 2724af9

Browse files
author
jiang-dawei15
committed
selinux: enable libcare-ctl to mprotect qemu process
Signed-off-by: Bihong Yu <[email protected]>
1 parent 4392535 commit 2724af9

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

‎dist/selinux/libcare.te‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,6 +52,9 @@ allow libcare_t libcare_file_t: lnk_file read_lnk_file_perms;
5252
# to read patient's /proc entries and be able to attach to it
5353
allow libcare_t self: capability { dac_override dac_read_search sys_ptrace };
5454

55+
# need by remote mprotect
56+
allow svirt_t self : process execmem;
57+
5558
allow libcare_t svirt_t : process ptrace;
5659
allow libcare_t svirt_t : dir list_dir_perms;
5760
allow libcare_t svirt_t : file rw_file_perms;

0 commit comments

Comments
 (0)