Skip to content

Commit

Permalink
Allow openconnect vpn read/write inherited vhost net device
Browse files Browse the repository at this point in the history
OpenConnect, running in the vpnc_t domain, uses the vhost-net device
for tun acceleration to make the tun device's io_uring accessible.
There is no virtualization feature used in this concept.

Resolves: rhbz#2221507
  • Loading branch information
zpytela committed Aug 1, 2023
1 parent 2d22101 commit d5d9c71
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/contrib/vpn.te
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,7 @@ corenet_rw_tun_tap_dev(vpnc_t)
dev_read_rand(vpnc_t)
dev_read_urand(vpnc_t)
dev_read_sysfs(vpnc_t)
dev_rw_inherited_vhost(vpnc_t)

domain_use_interactive_fds(vpnc_t)

Expand Down

0 comments on commit d5d9c71

Please sign in to comment.