Define user_namespace object class.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
2023-03-02 09:00:45 -05:00 · 2023-03-02 09:00:45 -05:00 · 0e1cc1e01e
parent cfbdaf5c30
commit 0e1cc1e01e
2 changed files with 7 additions and 0 deletions
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@ -1072,3 +1072,8 @@ class io_uring
 	override_creds
 	sqpoll
 }
+
+class user_namespace
+{
+	create
+}
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@ -203,4 +203,6 @@ class anon_inode

 class io_uring

+class user_namespace
+
 # FLASK