Skip to content

Commit

Permalink
Add container_file_t and container_ro_file_t as user_home_type
Browse files Browse the repository at this point in the history
Signed-off-by: Daniel J Walsh <[email protected]>
  • Loading branch information
rhatdan committed Apr 4, 2023
1 parent 5216df3 commit 5b5f3b8
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions container.te
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
policy_module(container, 2.209.0)
policy_module(container, 2.210.0)

gen_require(`
class passwd rootok;
Expand Down Expand Up @@ -130,6 +130,7 @@ term_pty(container_devpts_t)

typealias container_ro_file_t alias { container_share_t docker_share_t };
files_mountpoint(container_ro_file_t)
userdom_user_home_content(container_ro_file_t)

type container_port_t alias docker_port_t;
corenet_port(container_port_t)
Expand Down Expand Up @@ -583,7 +584,6 @@ fs_unmount_fusefs(container_runtime_domain)
fs_exec_fusefs_files(container_runtime_domain)
storage_rw_fuse(container_runtime_domain)


optional_policy(`
files_search_all(container_domain)
container_read_share_files(container_domain)
Expand Down Expand Up @@ -814,7 +814,7 @@ gen_require(`
')
container_manage_files_template(container, container)

typeattribute container_file_t container_file_type;
typeattribute container_file_t container_file_type, user_home_type;
typeattribute container_t container_domain, container_net_domain, container_user_domain;
allow container_user_domain self:process getattr;
allow container_domain { container_var_lib_t container_ro_file_t container_file_t }:file entrypoint;
Expand Down

0 comments on commit 5b5f3b8

Please sign in to comment.