Skip to content

Instantly share code, notes, and snippets.

@coulof
Last active July 20, 2020 09:24
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save coulof/9df7c9f3178ecf6706b0c5316ab9de7e to your computer and use it in GitHub Desktop.
Save coulof/9df7c9f3178ecf6706b0c5316ab9de7e to your computer and use it in GitHub Desktop.
SElinux policy csi-vxflexos
## <summary></summary>
module vxflexos-cni 1.0;
require {
type unlabeled_t;
type container_t;
class file { create open getattr setattr read write append rename link unlink ioctl lock };
class dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink write };
}
#!!!! WARNING: 'unlabeled_t' is a base type.
allow container_t unlabeled_t:dir { create open getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };
allow container_t unlabeled_t:file { create open getattr setattr read write append rename link unlink ioctl lock };
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment