Skip to content

Commit ed9b827

Browse files
sbrivio-rhlsm5
authored andcommitted
Revert "container: label /run/user/*/crun as container_var_run_t"
This reverts commit ae3532b ("container: label /run/user/*/crun as container_var_run_t") as it breaks basic Podman operation with pasta(1) (default rootless back-end): Error: setting up Pasta: pasta failed with exit code 1: Couldn't open PID file /run/user/1000/containers/networks/rootless-netns/rootless-netns-conn.pid: Permission denied A solution is being worked on, but it's not quite ready yet, see: #405 in the meantime, revert this to avoid widespread breakage for users. Link: #405 Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
1 parent ccf5a14 commit ed9b827

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

container.te

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -322,7 +322,6 @@ manage_sock_files_pattern(container_runtime_domain, container_var_run_t, contain
322322
manage_lnk_files_pattern(container_runtime_domain, container_var_run_t, container_var_run_t)
323323
files_pid_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
324324
files_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
325-
userdom_user_tmp_filetrans(container_runtime_domain, container_var_run_t, { dir file lnk_file sock_file })
326325
allow container_runtime_domain container_var_run_t:dir_file_class_set relabelfrom;
327326

328327
allow container_runtime_domain container_devpts_t:chr_file { relabelfrom rw_chr_file_perms setattr_chr_file_perms };

0 commit comments

Comments
 (0)