Merge pull request #265 from rhatdan/main

Allow container domains to shutdown sockets inheritted from container…
containers · Aug 14, 2023 · ed30ab0 · ed30ab0
2 parents ba84254 + 8bb5627
commit ed30ab0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.220.0)
+policy_module(container, 2.221.0)
 
 gen_require(`
 	class passwd rootok;
@@ -953,7 +953,7 @@ allow container_domain self:unix_dgram_socket { sendto create_socket_perms };
 allow container_domain self:passwd rootok;
 allow container_domain self:filesystem associate;
 allow container_domain self:netlink_kobject_uevent_socket create_socket_perms;
-allow container_domain container_runtime_domain:socket_class_set { accept ioctl read getattr lock write append getopt setopt };
+allow container_domain container_runtime_domain:socket_class_set { accept append getattr getopt ioctl lock map read recv_msg recvfrom send_msg sendto setopt shutdown write };
 
 kernel_getattr_proc(container_domain)
 kernel_list_all_proc(container_domain)