Skip to content

Commit

Permalink
Allow vpnc read/write inherited vhost net device
Browse files Browse the repository at this point in the history
OpenConnect uses the vhost-net device for tun acceleration
to make the tun device's io_uring accessible.
There is no virtualization feature used in this concept.

Resolves: rhbz#2221507
  • Loading branch information
zpytela committed Aug 1, 2023
1 parent 2d22101 commit 613bc05
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/vpn.te
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,7 @@ corenet_rw_tun_tap_dev(vpnc_t)
dev_read_rand(vpnc_t)
dev_read_urand(vpnc_t)
dev_read_sysfs(vpnc_t)
dev_rw_inherited_vhost(vpnc_t)

domain_use_interactive_fds(vpnc_t)

Expand Down

0 comments on commit 613bc05

Please sign in to comment.