selinux-refpolicy/config/appconfig-mcs/lxc_contexts

process = "system_u:system_r:container_t:s0"
content = "system_u:object_r:virt_var_lib_t:s0"
file = "system_u:object_r:container_file_t:s0"
container: svirt_lxc_net_t is now container_t svirt_lxc_domain is now container_domain and svirt_lxc_net_t is now container_t. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-10-11 14:22:32 +00:00			`process = "system_u:system_r:container_t:s0"`
Add lxc_contexts config file selinux_lxc_contexts_path() function in upstream libselinux points to this config file. It is ATM used by libvirt. The file from Fedora also contains sandbox_lxc_process and sandbox_kvm_process parameters, but I cannot find where they are used, keep them out of the file for the time being. 2016-02-19 15:43:10 +00:00			`content = "system_u:object_r:virt_var_lib_t:s0"`
container: svirt_lxc_net_t is now container_t svirt_lxc_domain is now container_domain and svirt_lxc_net_t is now container_t. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-10-11 14:22:32 +00:00			`file = "system_u:object_r:container_file_t:s0"`