openvswitch-selinux-policy

#3 Allow openvswitch to manage its files/sockets in a container context
Merged by aconole. Opened by cjeanner.
cjeanner/openvswitch-selinux-policy container/ovs  into  master

Download 3.patch

If we're to use and manage openvswitch from within containers, we
must enable a couple of new policies so that it can actually manage
its socket and directories, especially if they are bind-mounts

This capability grant already exists (net_broadcast). Why was this line needed?

This capability grant already exists (net_broadcast). Why was this line needed?

Woops, didn't see it, sorry. Updating the PR.
Edited by cjeanner

rebased onto 8fd5128aa31ed80f266708f8c737c28ae001dbc5

Pull-Request has been merged by aconole
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.