search

containers / udica

This repository contains a tool for generating SELinux security profiles for containers
GNU General Public License v3.0
488 stars 47 forks source link

Fix generating policy for Crio mounts #124

Closed vmojzis closed 1 year ago

vmojzis commented 1 year ago

Fix issue introduced by Commit 7c7b9ad505ab6b7cd809d30f1699d4bb7323ce0a "Avoid duplicate rules for accessing mounts and devices" where policy rules for "read-only mounts" are not generated properly.

Adjust Crio basic test to incorporate a read only mount that is not covered by a special case ("/home" is handled by "home_container" and anything under "/var/lib/kubelet" is ignored).

Thanks https://github.com/arcardon (jamjcardona@sbcglobal.net) for spotting this in the code.

vmojzis commented 1 year ago

Merged.