diff --git a/VERSION b/VERSION index ee6cdce3..b6160487 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.6.1 +0.6.2 diff --git a/qm.if b/qm.if index 0d458c97..fb195220 100644 --- a/qm.if +++ b/qm.if @@ -566,3 +566,30 @@ template(`qm_domain_template',` vsomeip_use($1_container_domain) ') ') + +######################################## +## +## Creates types and rules for a basic +## container runtime process domain. +## +## +## +## Prefix for the domain. +## +## +# +interface(`vsomeip_use',` + gen_require(` + type vsomeip_t; + type vsomeip_var_run_t; + type router_vsomeip_var_run_t; + ') + # create and use vsomeip sockets: + allow $1 vsomeip_var_run_t:dir { add_name remove_name write }; + allow $1 vsomeip_var_run_t:sock_file { create setattr write unlink }; + + # Talk to routing manager (and back) + allow $1 vsomeip_t:unix_stream_socket connectto; + allow vsomeip_t $1:unix_stream_socket connectto; + allow $1 router_vsomeip_var_run_t:sock_file write; +') diff --git a/qm.te b/qm.te index 9ab774a5..31f76042 100644 --- a/qm.te +++ b/qm.te @@ -1,3 +1,3 @@ -policy_module(qm, 0.6.1) +policy_module(qm, 0.6.2) qm_domain_template(qm) diff --git a/rpm/qm.spec b/rpm/qm.spec index b91593b5..62a737c2 100644 --- a/rpm/qm.spec +++ b/rpm/qm.spec @@ -1,8 +1,3 @@ -# Support for vsomeip is enabled by default, it can be disabled passing `--define "with_vsomeip 0"` option to rpmbuild -%if 0%{!?with_vsomeip:1} -%global with_vsomeip 1 -%endif - %global debug_package %{nil} # Some bits borrowed from the openstack-selinux package @@ -69,10 +64,6 @@ BuildRequires: pkgconfig(systemd) BuildRequires: selinux-policy >= %_selinux_policy_version BuildRequires: selinux-policy-devel >= %_selinux_policy_version -%if %{with_vsomeip} -BuildRequires: vsomeip3-selinux -%endif - Requires: selinux-policy >= %_selinux_policy_version Requires(post): selinux-policy-base >= %_selinux_policy_version Requires(post): selinux-policy-targeted >= %_selinux_policy_version