Don't setup users for writing to pid_sockets

Signed-off-by: Daniel J Walsh <[email protected]>
containers · May 24, 2021 · 61b862a · 61b862a
1 parent 233e620
commit 61b862a
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/container.if b/container.if
@@ -586,7 +586,6 @@ interface(`container_spc_stream_connect',`
 	')
 
 	files_search_pids($1)
-	files_write_all_pid_sockets($1)
 	allow $1 spc_t:unix_stream_socket connectto;
 ')
 

diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.162.1)
+policy_module(container, 2.162.2)
 
 gen_require(`
 	class passwd rootok;