fix for over-broad container_runtime_exec_t - Githubissues

k3s-io / k3s-selinux

SELinux policy for k3s

Apache License 2.0

66 stars 20 forks source link

fix for over-broad container_runtime_exec_t #25

Closed dweomer closed 2 years ago

dweomer commented 2 years ago

${K3S_DATA_DIR}/.lock => container_lock_t
${K3S_DATA_DIR}/*/etc/ => container_config_t

Addresses part of k3s-io/k3s#4401

Signed-off-by: Jacob Blain Christen jacob@rancher.com

dweomer commented 2 years ago

Fixes https://github.com/k3s-io/k3s/issues/4554