1
1
Fork 0
mirror of https://github.com/containers/udica synced 2024-05-23 01:36:21 +02:00
udica/tests/test_confined_lsid.cil
Vit Mojzis d444e67ead Add tests covering confined user policy generation
Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
2024-02-12 19:53:57 +01:00

17 lines
809 B
Plaintext

(boolean my_container_exec_content true)
(role my_container_r)
(type my_container_dbus_t)
(type my_container_gkeyringd_t)
(type my_container_sudo_t)
(type my_container_sudo_tmp_t)
(type my_container_t)
(type my_container_userhelper_t)
(user my_container_u)
(userrole my_container_u my_container_r)
(userlevel my_container_u (s0))
(userrange my_container_u ((s0 ) (s0 (c0))))
(call confinedom_security_advanced_macro (my_container_t my_container_r my_container_sudo_t my_container_userhelper_t))
(call confinedom_security_basic_macro (my_container_t my_container_r))
(call confinedom_sudo_macro (my_container_t my_container_r my_container_sudo_t my_container_sudo_tmp_t))
(call confinedom_user_login_macro (my_container_t my_container_r my_container_gkeyringd_t my_container_dbus_t my_container_exec_content))