mirror of
https://github.com/containers/udica
synced 2024-05-26 02:06:12 +02:00
7 lines
328 B
Plaintext
7 lines
328 B
Plaintext
(block my_container
|
|
(blockinherit container)
|
|
(blockinherit restricted_net_container)
|
|
(allow process process ( capability ( audit_write chown dac_override fowner fsetid kill mknod net_bind_service net_raw setfcap setgid setpcap setuid sys_chroot )))
|
|
|
|
(allow process mysqld_port_t ( tcp_socket ( name_bind )))
|
|
) |