RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

podman: allow system podman to interact with container transient units 

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-03-31 14:18:55 -04:00
parent db2ec49444
commit 91da5e861b
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/podman.te
View File

@ -66,6 +66,10 @@ ifdef(`init_systemd',`
init_start_system(podman_t)
init_stop_system(podman_t)
# containers get created as systemd transient units
init_get_transient_units_status(podman_t)
init_start_transient_units(podman_t)
# podman can read logs from containers which are
# sent to the system journal
logging_search_logs(podman_t)