RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/config/appconfig-standard/lxc_contexts

6 lines
241 B
Plaintext
Raw Normal View History

container: svirt_lxc_net_t is now container_t svirt_lxc_domain is now container_domain and svirt_lxc_net_t is now container_t. Signed-off-by: Kenton Groombridge <me@concord.sh>
2021-10-11 14:22:32 +00:00
process = "system_u:system_r:container_t"
Add lxc_contexts config file selinux_lxc_contexts_path() function in upstream libselinux points to this config file. It is ATM used by libvirt. The file from Fedora also contains sandbox_lxc_process and sandbox_kvm_process parameters, but I cannot find where they are used, keep them out of the file for the time being.
2016-02-19 15:43:10 +00:00
content = "system_u:object_r:virt_var_lib_t"
container: svirt_lxc_net_t is now container_t svirt_lxc_domain is now container_domain and svirt_lxc_net_t is now container_t. Signed-off-by: Kenton Groombridge <me@concord.sh>
2021-10-11 14:22:32 +00:00
file = "system_u:object_r:container_file_t"
lxc_contexts: add ro_file and sandbox_lxc_process contexts Signed-off-by: Kenton Groombridge <me@concord.sh>
2022-01-18 01:17:44 +00:00
ro_file = "system_u:object_r:container_ro_file_t:s0"
sandbox_lxc_process = "system_u:system_r:container_t:s0"