We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 168a687 commit 84d09ceCopy full SHA for 84d09ce
container.te
@@ -1,4 +1,4 @@
1
-policy_module(container, 2.172.1)
+policy_module(container, 2.173.0)
2
3
gen_require(`
4
class passwd rootok;
@@ -115,7 +115,6 @@ mls_trusted_object(container_runtime_t)
115
#
116
allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource };
117
allow container_runtime_domain self:tun_socket { create_socket_perms relabelto };
118
-allow container_runtime_domain self:lockdown { confidentiality integrity };
119
allow container_runtime_domain self:process ~setcurrent;
120
allow container_runtime_domain self:passwd rootok;
121
allow container_runtime_domain self:fd use;
0 commit comments