Skip to content

Instantly share code, notes, and snippets.

@coulof

coulof/vxflexos-cni.if

Last active Jul 20, 2020
Embed
What would you like to do?
SElinux policy csi-vxflexos
## <summary></summary>
module vxflexos-cni 1.0;
require {
type unlabeled_t;
type container_t;
class file { create open getattr setattr read write append rename link unlink ioctl lock };
class dir { add_name create getattr ioctl link lock open read remove_name rename reparent rmdir search setattr unlink write };
}
#!!!! WARNING: 'unlabeled_t' is a base type.
allow container_t unlabeled_t:dir { create open getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };
allow container_t unlabeled_t:file { create open getattr setattr read write append rename link unlink ioctl lock };
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment