summaryrefslogtreecommitdiff
blob: 9e15caa1923aafd8ef9b17632543069e93114221 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
--- apps/qemu.te	2010-12-13 15:11:01.000000000 +0100
+++ apps/qemu.te	2011-01-22 21:35:19.555999967 +0100
@@ -56,6 +56,10 @@
 userdom_search_user_home_content(qemu_t)
 userdom_read_user_tmpfs_files(qemu_t)
 
+allow qemu_t self:socket create_socket_perms;
+
+kernel_request_load_module(qemu_t)
+
 tunable_policy(`qemu_full_network',`
 	allow qemu_t self:udp_socket create_socket_perms;
 
@@ -116,3 +120,7 @@
 	allow unconfined_qemu_t self:process { execstack execmem };
 	allow unconfined_qemu_t qemu_exec_t:file execmod;
 ')
+
+optional_policy(`
+	vde_connect(qemu_t)
+')