kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/contrib/selinux-oraclelinux-7/docker-engine-selinux/docker.fc

19 lines
944 B
Text
Raw Normal View History

Add Oracle Linux distro specific selinux policy With the latest OL7.2, selinux policy that is shipped might not be the latest for it to work or build with selinux policy for docker-1.12. To be able to achieve that here is what is done: 1. Added systemd_machined policy which is part of systemd. 2. Temporarily comment out unconfined_typebounds because the current OL7's selinux doesn't have unconfineduser selinux policy, to include this will be too much. Will revisit this once we have updated the selinux policy. Fixes: #24612 Signed-off-by: Thomas Tanaka <thomas.tanaka@oracle.com>
2016-08-10 16:13:27 -04:00
/root/\.docker gen_context(system_u:object_r:docker_home_t,s0)
Update oracle linux selinux to match docker upstream Add a dependency on specific selinux version for OL on docker-engine.spec Signed-off-by: Thomas Tanaka <thomas.tanaka@oracle.com>
2017-03-02 16:59:05 -05:00
/usr/bin/dockerd -- gen_context(system_u:object_r:docker_exec_t,s0)
Add Oracle Linux distro specific selinux policy With the latest OL7.2, selinux policy that is shipped might not be the latest for it to work or build with selinux policy for docker-1.12. To be able to achieve that here is what is done: 1. Added systemd_machined policy which is part of systemd. 2. Temporarily comment out unconfined_typebounds because the current OL7's selinux doesn't have unconfineduser selinux policy, to include this will be too much. Will revisit this once we have updated the selinux policy. Fixes: #24612 Signed-off-by: Thomas Tanaka <thomas.tanaka@oracle.com>
2016-08-10 16:13:27 -04:00
/usr/lib/systemd/system/docker.service -- gen_context(system_u:object_r:docker_unit_file_t,s0)
/etc/docker(/.*)? gen_context(system_u:object_r:docker_config_t,s0)
/var/lib/docker(/.*)? gen_context(system_u:object_r:docker_var_lib_t,s0)
/var/run/docker\.pid -- gen_context(system_u:object_r:docker_var_run_t,s0)
/var/run/docker\.sock -s gen_context(system_u:object_r:docker_var_run_t,s0)
/var/run/docker-client(/.*)? gen_context(system_u:object_r:docker_var_run_t,s0)
/var/lib/docker/init(/.*)? gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/containers/.*/hosts gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/containers/.*/hostname gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/.*/config\.env gen_context(system_u:object_r:docker_share_t,s0)
Copy permalink