Skip to content

Instantly share code, notes, and snippets.

@cjeanner

cjeanner/podman-cert_t.te

Created August 22, 2018 14:26
Show Gist options
  • Save cjeanner/d063ad79158caee4ee6e57be7abadd93 to your computer and use it in GitHub Desktop.
Save cjeanner/d063ad79158caee4ee6e57be7abadd93 to your computer and use it in GitHub Desktop.
Download ZIP
podman-cert_t.te
Raw
podman-cert_t.te
module podman-cert_t 1.0;
require {
type cert_t;
type container_t;
class file { open read };
class dir read;
}
#============= container_t ==============
allow container_t cert_t:dir read;
allow container_t cert_t:file read;
allow container_t cert_t:file open;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment