nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docker, podman: use renamed user runtime unit status interface

Browse Source 
Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-04-29 15:34:07 -04:00
parent ff834b29c1
commit bc8aa02010
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/docker.te
View File

@ -129,9 +129,9 @@ container_use_container_ptys(dockerd_user_t)
ifdef(`init_systemd',`
systemd_search_user_runtime(dockerd_user_t)
systemd_write_user_runtime_socket(dockerd_user_t)
systemd_get_user_runtime_units_status(dockerd_user_t)
systemd_start_user_runtime_units(dockerd_user_t)
systemd_stop_user_runtime_units(dockerd_user_t)
systemd_status_user_runtime_units(dockerd_user_t)
')
optional_policy(`

2
policy/modules/services/podman.te
View File

@ -134,9 +134,9 @@ ifdef(`init_systemd',`
systemd_dbus_chat_logind(podman_user_t)
# containers are created as transient user units
systemd_get_user_runtime_units_status(podman_user_t)
systemd_start_user_runtime_units(podman_user_t)
systemd_stop_user_runtime_units(podman_user_t)
systemd_status_user_runtime_units(podman_user_t)
# podman can read logs from containers which are
# sent to the user journal