nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

container: add tunable to allow containers to use huge pages

Browse Source 
Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-10-01 13:58:49 -04:00
parent dc66fd7238
commit 9216a7a7f1
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
policy/modules/services/container.te
View File

@ -44,6 +44,13 @@ gen_tunable(container_spc_create_nfs_servers, false)
## </desc> ## </desc>
gen_tunable(container_use_ecryptfs, false) gen_tunable(container_use_ecryptfs, false)
## <desc>
## <p>
## Allow containers to use huge pages.
## </p>
## </desc>
gen_tunable(container_use_hugetlbfs, false)
## <desc> ## <desc>
## <p> ## <p>
## Allow containers to use NFS filesystems. ## Allow containers to use NFS filesystems.
@ -306,6 +313,10 @@ tunable_policy(`container_use_ecryptfs',`
fs_list_ecryptfs(container_domain) fs_list_ecryptfs(container_domain)
') ')
tunable_policy(`container_use_hugetlbfs',`
fs_mmap_rw_hugetlbfs_files(container_t)
')
tunable_policy(`container_use_nfs',` tunable_policy(`container_use_nfs',`
fs_manage_nfs_dirs(container_domain) fs_manage_nfs_dirs(container_domain)
fs_manage_nfs_files(container_domain) fs_manage_nfs_files(container_domain)