mirror of
https://github.com/containers/udica
synced 2024-05-23 01:36:21 +02:00
d444e67ead
Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
17 lines
809 B
Plaintext
17 lines
809 B
Plaintext
(boolean my_container_exec_content true)
|
|
(role my_container_r)
|
|
(type my_container_dbus_t)
|
|
(type my_container_gkeyringd_t)
|
|
(type my_container_sudo_t)
|
|
(type my_container_sudo_tmp_t)
|
|
(type my_container_t)
|
|
(type my_container_userhelper_t)
|
|
(user my_container_u)
|
|
(userrole my_container_u my_container_r)
|
|
(userlevel my_container_u (s0))
|
|
(userrange my_container_u ((s0 ) (s0 (c0))))
|
|
|
|
(call confinedom_security_advanced_macro (my_container_t my_container_r my_container_sudo_t my_container_userhelper_t))
|
|
(call confinedom_security_basic_macro (my_container_t my_container_r))
|
|
(call confinedom_sudo_macro (my_container_t my_container_r my_container_sudo_t my_container_sudo_tmp_t))
|
|
(call confinedom_user_login_macro (my_container_t my_container_r my_container_gkeyringd_t my_container_dbus_t my_container_exec_content)) |