Merge pull request #233 from rhatdan/fc

Fix paths to not cause relabel
containers · May 2, 2023 · ae2ada1 · ae2ada1
2 parents 53e7362 + 2a8f8f8
commit ae2ada1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/container.fc b/container.fc
@@ -116,7 +116,8 @@ HOME_DIR/\.local/share/containers/storage/volumes/[^/]*/.*	gen_context(system_u:
 
 /var/run/kata-containers(/.*)?	gen_context(system_u:object_r:container_kvm_var_run_t,s0)
 
-/(var|opt)/local-path-provisioner(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
+/var/local-path-provisioner(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
+/opt/local-path-provisioner(/.*)?		gen_context(system_u:object_r:container_file_t,s0)
 
 /var/lib/origin(/.*)?	gen_context(system_u:object_r:container_file_t,s0)
 /var/lib/kubernetes/pods(/.*)?	gen_context(system_u:object_r:container_file_t,s0)

diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.211.0)
+policy_module(container, 2.211.1)
 
 gen_require(`
 	class passwd rootok;