Merge pull request #21381 from mlaventure/selinux-pcp_pmcd

Give selinux pcp_pmcd_t type access to /var/lib/docker
2016-03-22 17:44:43 -07:00 · 2016-03-22 17:44:43 -07:00 · 55304e2e55
commit 55304e2e55
parent 694b32df51 00bf3c85d0
1 changed files with 7 additions and 0 deletions
--- a/contrib/docker-engine-selinux/docker.te
+++ b/contrib/docker-engine-selinux/docker.te
@ -405,3 +405,10 @@ optional_policy(`

     dontaudit svirt_sandbox_domain domain:key {search link};
 ')
+
+optional_policy(`
+	gen_require(`
+		type pcp_pmcd_t;
+	')
+	docker_manage_lib_files(pcp_pmcd_t)
+')