staff.te: Allow staff access to the virt stream, needed for when the

sockets are access remotely over SSH. Signed-off-by: Jonathan Davies <jd+github@upthedownstair.com>
2021-04-24 17:14:06 +01:00 · 2021-04-24 17:14:06 +01:00 · 63eb925698
commit 63eb925698
parent ffdefbeb62
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/roles/staff.te
+++ b/policy/modules/roles/staff.te
@ -60,6 +60,10 @@ optional_policy(`
 	syncthing_role(staff_r, staff_t)
 ')

+optional_policy(`
+	virt_stream_connect(staff_t)
+')
+
 optional_policy(`
 	vlock_run(staff_t, staff_r)
 ')