sysadm: allow container admin access

Signed-off-by: Kenton Groombridge <me@concord.sh>
2021-12-23 09:53:33 -05:00 · 2021-12-23 09:53:33 -05:00 · 093e280e77
parent 7a0b01bd2a
commit 093e280e77
1 changed files with 4 additions and 0 deletions
--- a/policy/modules/roles/sysadm.te
+++ b/policy/modules/roles/sysadm.te
@ -282,6 +282,10 @@ optional_policy(`
 	consoletype_run(sysadm_t, sysadm_r)
 ')

+optional_policy(`
+	container_admin(sysadm_t, sysadm_r)
+')
+
 optional_policy(`
 	corosync_admin(sysadm_t, sysadm_r)
 ')