commit: 3a6f1fdc625af28d62c7906f4e8666a7ae8661dd Author: Kenton Groombridge <me <AT> concord <DOT> sh> AuthorDate: Tue Jan 18 01:17:44 2022 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Sun Jan 30 01:15:06 2022 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3a6f1fdc
lxc_contexts: add ro_file and sandbox_lxc_process contexts Signed-off-by: Kenton Groombridge <me <AT> concord.sh> Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org> config/appconfig-mcs/lxc_contexts | 2 ++ config/appconfig-mls/lxc_contexts | 2 ++ config/appconfig-standard/lxc_contexts | 2 ++ 3 files changed, 6 insertions(+) diff --git a/config/appconfig-mcs/lxc_contexts b/config/appconfig-mcs/lxc_contexts index 659a0c7c..de397ed2 100644 --- a/config/appconfig-mcs/lxc_contexts +++ b/config/appconfig-mcs/lxc_contexts @@ -1,3 +1,5 @@ process = "system_u:system_r:container_t:s0" content = "system_u:object_r:virt_var_lib_t:s0" file = "system_u:object_r:container_file_t:s0" +ro_file = "system_u:object_r:container_ro_file_t:s0" +sandbox_lxc_process = "system_u:system_r:container_t:s0" diff --git a/config/appconfig-mls/lxc_contexts b/config/appconfig-mls/lxc_contexts index 659a0c7c..de397ed2 100644 --- a/config/appconfig-mls/lxc_contexts +++ b/config/appconfig-mls/lxc_contexts @@ -1,3 +1,5 @@ process = "system_u:system_r:container_t:s0" content = "system_u:object_r:virt_var_lib_t:s0" file = "system_u:object_r:container_file_t:s0" +ro_file = "system_u:object_r:container_ro_file_t:s0" +sandbox_lxc_process = "system_u:system_r:container_t:s0" diff --git a/config/appconfig-standard/lxc_contexts b/config/appconfig-standard/lxc_contexts index 2cf33ddb..f2d6ef9b 100644 --- a/config/appconfig-standard/lxc_contexts +++ b/config/appconfig-standard/lxc_contexts @@ -1,3 +1,5 @@ process = "system_u:system_r:container_t" content = "system_u:object_r:virt_var_lib_t" file = "system_u:object_r:container_file_t" +ro_file = "system_u:object_r:container_ro_file_t:s0" +sandbox_lxc_process = "system_u:system_r:container_t:s0"
