mirror of
https://github.com/containers/udica
synced 2026-03-14 19:55:45 +01:00
9 lines
596 B
Plaintext
9 lines
596 B
Plaintext
(block my_container
|
|
(blockinherit container)
|
|
(allow process process ( capability ( audit_write chown dac_override fowner fsetid kill mknod net_bind_service net_raw setfcap setgid setpcap setuid sys_chroot )))
|
|
|
|
(allow process framebuf_device_t ( blk_file ( getattr read write append ioctl lock open )))
|
|
(allow process framebuf_device_t ( chr_file ( getattr read write append ioctl lock open )))
|
|
(allow process var_spool_t ( blk_file ( getattr read write append ioctl lock open )))
|
|
(allow process var_spool_t ( chr_file ( getattr read write append ioctl lock open )))
|
|
) |