The macro is adapted from container-selinux v2.143.0 and because it
calls the macro that it is emulating it serves as an rke2-specific
supplemental stand-in in the type enforcement file.
To validate against our rancher/containerd+cri fork(s):
vagrant up --provision-with=shell,selinux,test-cri
Oats87
commented
4 years ago
The macro is adapted from container-selinux v2.143.0 and because it calls the macro that it is emulating it serves as an rke2-specific supplemental stand-in in the type enforcement file.
To validate against our rancher/containerd+cri fork(s):