Skip to content

Commit ebc0ff7

Browse files
authored
Merge pull request #28 from zmc/selinux-updates
selinux: Add lvm_control_t:chr_file mounton
2 parents f17c0ce + 8ad6ebd commit ebc0ff7

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

ceph_devstack/ceph_devstack.pp

174 Bytes
Binary file not shown.

ceph_devstack/ceph_devstack.te

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,7 @@ require {
7070
class bpf prog_load;
7171
class bpf map_create;
7272

73+
type lvm_control_t;
7374
type fuse_device_t;
7475

7576
type tun_tap_device_t;
@@ -111,6 +112,7 @@ allow container_init_t system_map_t:file mounton;
111112
allow container_init_t mtrr_device_t:file mounton;
112113
allow container_init_t self:bpf prog_load;
113114
allow container_init_t self:bpf map_create;
115+
allow container_init_t lvm_control_t:chr_file mounton;
114116
allow container_init_t fuse_device_t:chr_file mounton;
115117
allow container_init_t fixed_disk_device_t:blk_file mounton;
116118
allow container_init_t tun_tap_device_t:chr_file mounton;

0 commit comments

Comments
 (0)