25 lines
1.2 KiB
Diff
25 lines
1.2 KiB
Diff
From ae3532b16fea57c04de9c1d74a1f1af12066a35a Mon Sep 17 00:00:00 2001
|
|
From: Giuseppe Scrivano <gscrivan@redhat.com>
|
|
Date: Wed, 10 Sep 2025 15:14:36 +0200
|
|
Subject: [PATCH] container: label /run/user/*/crun as container_var_run_t
|
|
|
|
Closes: https://github.com/containers/container-selinux/issues/404
|
|
|
|
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
|
|
---
|
|
container.te | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/container.te b/container.te
|
|
index 63ae6bf..fb464f9 100644
|
|
--- a/container.te
|
|
+++ b/container.te
|
|
@@ -322,6 +322,7 @@ manage_sock_files_pattern(container_runtime_domain, container_var_run_t, contain
|
|
manage_lnk_files_pattern(container_runtime_domain, container_var_run_t, container_var_run_t)
|
|
files_pid_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
|
|
files_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
|
|
+userdom_user_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
|
|
allow container_runtime_domain container_var_run_t:dir_file_class_set relabelfrom;
|
|
|
|
allow container_runtime_domain container_devpts_t:chr_file { relabelfrom rw_chr_file_perms setattr_chr_file_perms };
|