Allow init_t domain to manager kubernetes_file_t

Signed-off-by: Daniel J Walsh <[email protected]>
containers · May 11, 2021 · da28288 · da28288
1 parent e1092cd
commit da28288
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/container.if b/container.if
@@ -256,10 +256,13 @@ interface(`container_exec_share_files',`
 interface(`container_manage_config_files',`
 	gen_require(`
 		type container_config_t;
+		type kubernetes_file_t;
 	')
 
 	files_search_var_lib($1)
 	manage_files_pattern($1, container_config_t, container_config_t)
+	manage_dirs_pattern($1, kubernetes_file_t, kubernetes_file_t)
+	manage_files_pattern($1, kubernetes_file_t, kubernetes_file_t)
 ')
 
 ########################################

diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.161.1)
+policy_module(container, 2.162.0)
 gen_require(`
 	class passwd rootok;
 ')