[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

[Jason Zaman]

commit:     95d8a0674bc68569a236d0ee1fee0962829e360b
Author:     Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Fri Jan 21 19:05:06 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Jan 30 01:12:42 2022 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=95d8a067

container: call podman access in container access

Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 policy/modules/services/container.if | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/policy/modules/services/container.if 
b/policy/modules/services/container.if
index 3a229ead..d7ad3e84 100644
--- a/policy/modules/services/container.if
+++ b/policy/modules/services/container.if
@@ -283,6 +283,10 @@ template(`container_user_role',`
 
                systemd_user_app_status($1, container_user_domain)
        ')
+
+       optional_policy(`
+               podman_user_role($1, $2, $3, $4)
+       ')
 ')
 
 ########################################
@@ -797,4 +801,8 @@ interface(`container_admin',`
 
        fs_search_tmpfs($1)
        admin_pattern($1, container_engine_tmpfs_t)
+
+       optional_policy(`
+               podman_admin($1, $2)
+       ')
 ')