Skip to content

Commit 84d09ce

Browse files
committed
Remove lockdown allow rules
Upstream selinux-policy is removing the class. Signed-off-by: Daniel J Walsh <[email protected]>
1 parent 168a687 commit 84d09ce

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

container.te

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
policy_module(container, 2.172.1)
1+
policy_module(container, 2.173.0)
22

33
gen_require(`
44
class passwd rootok;
@@ -115,7 +115,6 @@ mls_trusted_object(container_runtime_t)
115115
#
116116
allow container_runtime_domain self:capability { chown kill fowner fsetid mknod net_admin net_bind_service net_raw setfcap sys_resource };
117117
allow container_runtime_domain self:tun_socket { create_socket_perms relabelto };
118-
allow container_runtime_domain self:lockdown { confidentiality integrity };
119118
allow container_runtime_domain self:process ~setcurrent;
120119
allow container_runtime_domain self:passwd rootok;
121120
allow container_runtime_domain self:fd use;

0 commit comments

Comments
 (0)