[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

[Jason Zaman]

commit:     3973d1bd59980dc6e122e2b8b759c03937de9173
Author:     Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Fri Jan 21 19:05:31 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Jan 30 01:12:42 2022 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3973d1bd

container: call docker access in container access

Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/services/container.if | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/policy/modules/services/container.if 
b/policy/modules/services/container.if
index 58e8c470..28699f52 100644
--- a/policy/modules/services/container.if
+++ b/policy/modules/services/container.if
@@ -284,6 +284,10 @@ template(`container_user_role',`
                systemd_user_app_status($1, container_user_domain)
        ')
 
+       optional_policy(`
+               docker_user_role($1, $2, $3, $4)
+       ')
+
        optional_policy(`
                podman_user_role($1, $2, $3, $4)
        ')
@@ -1323,6 +1327,10 @@ interface(`container_admin',`
        fs_search_tmpfs($1)
        admin_pattern($1, container_engine_tmpfs_t)
 
+       optional_policy(`
+               docker_admin($1, $2)
+       ')
+
        optional_policy(`
                podman_admin($1, $2)
        ')