selinux-refpolicy/policy/modules/services/podman.fc

/usr/bin/podman	--	gen_context(system_u:object_r:podman_exec_t,s0)
/usr/bin/conmon	--	gen_context(system_u:object_r:podman_conmon_exec_t,s0)
container, podman: initial support for podman Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-12-22 16:05:53 +00:00			`/usr/bin/podman -- gen_context(system_u:object_r:podman_exec_t,s0)`
container, podman: add policy for conmon Make conmon run in a separate domain and allow podman types to transition to it. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-12-31 19:47:00 +00:00			`/usr/bin/conmon -- gen_context(system_u:object_r:podman_conmon_exec_t,s0)`