nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chromium: Allow user namespace creation.

Browse Source 
closes #600

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
This commit is contained in:
Chris PeBenito 2023-03-02 09:01:24 -05:00
parent 0e1cc1e01e
commit ffd80c42c9
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
policy/modules/apps/chromium.te
View File

@ -96,6 +96,7 @@ allow chromium_t self:file create;
allow chromium_t self:fifo_file rw_fifo_file_perms;
allow chromium_t self:sem create_sem_perms;
allow chromium_t self:netlink_kobject_uevent_socket client_stream_socket_perms;
allow chromium_t self:user_namespace create;
# cap_userns sys_admin for the sandbox
allow chromium_t self:cap_userns { sys_admin sys_chroot sys_ptrace };