nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

podman: allow podman to stop systemd transient units

Browse Source 
Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-12-07 10:45:43 -05:00
parent e59404bd44
commit 7662001300
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/podman.te
View File

@ -69,6 +69,7 @@ ifdef(`init_systemd',`
# containers get created as systemd transient units
init_get_transient_units_status(podman_t)
init_start_transient_units(podman_t)
init_stop_transient_units(podman_t)
# podman can read logs from containers which are
# sent to the system journal
@ -212,6 +213,7 @@ container_manage_engine_tmp_sock_files(podman_conmon_t)
ifdef(`init_systemd',`
init_get_transient_units_status(podman_conmon_t)
init_start_transient_units(podman_conmon_t)
init_stop_transient_units(podman_conmon_t)
init_start_system(podman_conmon_t)
init_stop_system(podman_conmon_t)
')