Fix spc_t transition rules on tmpfs_t

Signed-off-by: Daniel J Walsh <[email protected]>
containers · Jan 5, 2023 · 8d1f141 · 8d1f141
1 parent 94b2618
commit 8d1f141
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.197.0)
+policy_module(container, 2.198.0)
 
 gen_require(`
 	class passwd rootok;
@@ -686,6 +686,7 @@ role system_r types spc_t;
 domtrans_pattern(container_runtime_domain, container_ro_file_t, spc_t)
 domtrans_pattern(container_runtime_domain, container_var_lib_t, spc_t)
 domtrans_pattern(container_runtime_domain, fusefs_t, spc_t)
+fs_tmpfs_filetrans(spc_t, container_file_t, { dir file lnk_file })
 
 allow container_runtime_domain spc_t:process2 nnp_transition;
 admin_pattern(spc_t, kubernetes_file_t)