Allow cron jobs to run podman

Signed-off-by: Daniel J Walsh <[email protected]>
containers · Jul 23, 2020 · 965c7fb · 965c7fb
1 parent 8c26927
commit 965c7fb
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.139.0)
+policy_module(container, 2.140.0)
 gen_require(`
 	class passwd rootok;
 ')
@@ -310,6 +310,10 @@ seutil_read_config(container_runtime_domain)
 sysnet_dns_name_resolve(container_runtime_domain)
 sysnet_exec_ifconfig(container_runtime_domain)
 
+optional_policy(`
+	cron_system_entry(container_runtime_t, container_runtime_exec_t)
+')
+
 optional_policy(`
 	ssh_use_ptys(container_runtime_domain)
 ')