Skip to content

Commit ae3532b

Browse files
committed
container: label /run/user/*/crun as container_var_run_t
Closes: #404 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
1 parent edfbda4 commit ae3532b

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

container.te

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -322,6 +322,7 @@ manage_sock_files_pattern(container_runtime_domain, container_var_run_t, contain
322322
manage_lnk_files_pattern(container_runtime_domain, container_var_run_t, container_var_run_t)
323323
files_pid_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
324324
files_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
325+
userdom_user_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
325326
allow container_runtime_domain container_var_run_t:dir_file_class_set relabelfrom;
326327

327328
allow container_runtime_domain container_devpts_t:chr_file { relabelfrom rw_chr_file_perms setattr_chr_file_perms };

0 commit comments

Comments
 (0)