selinux-refpolicy/policy/modules
Nicolas Iooss a7c9634eca
Add a policy module for WireGuard VPN
WireGuard is a fast, modern, secure VPN tunnel, according to
https://www.wireguard.com/. In order to install it, the mostly
documented way consists in building and installing an out-of-tree kernel
module and using userland tools to configure this module (wg and
wg-quick).

* WireGuard is like "ip": the userland tool communicates with the kernel
  module through a netlink socket.

* WireGuard is like "iptables": there is no daemon, but some
  distributions ship systemd units that restores a WireGuard
  configuration when started.

* WireGuard is like other services: its configuration files are in /etc,
  and it can use /run and /tmp.

Create a new policy module which handles all of this.

Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2019-09-06 22:20:40 +02:00
..
admin Various: Module version bump. 2019-08-31 06:55:57 -04:00
apps various: Module version bump. 2019-09-03 19:47:12 -04:00
kernel various: Module version bump. 2019-09-03 19:47:12 -04:00
roles Add a policy module for WireGuard VPN 2019-09-06 22:20:40 +02:00
services Add a policy module for WireGuard VPN 2019-09-06 22:20:40 +02:00
system various: Module version bump. 2019-09-03 19:47:12 -04:00