commit: aa4b3cfef24de86e9b3e2d2b3465c3847472a6e2
Author: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org>
AuthorDate: Tue Jun 24 16:40:03 2025 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Tue Jul 15 08:04:55 2025 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=aa4b3cfe
zfs: allow connect to incus daemon
Signed-off-by: Marc Schiffbauer <mschiff <AT> gentoo.org>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
policy/modules/services/zfs.te | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/policy/modules/services/zfs.te b/policy/modules/services/zfs.te
index 246bbf009..309742fa2 100644
--- a/policy/modules/services/zfs.te
+++ b/policy/modules/services/zfs.te
@@ -149,6 +149,11 @@ optional_policy(`
fstools_runtime_filetrans(zfs_t, dir, "blkid")
')
+optional_policy(`
+ # required when incusd is using zfs as storage backend
+ incus_stream_connect_daemon(zfs_t)
+')
+
optional_policy(`
kernel_rw_rpc_sysctls(zfs_t)
