kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/contrib/selinux-fedora-24/docker-engine-selinux/docker.fc

30 lines
1.7 KiB
Text
Raw Normal View History

add selinux-policy and docker-engine-selinux rpm Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-08-25 15:46:35 -04:00
/root/\.docker gen_context(system_u:object_r:docker_home_t,s0)
Add selinux policy per distro This adds the ability to have different profiles for individual distros and versions of the distro because they all ship with and depend on different versions of policy packages. The `selinux` dir contains the unmodified policy that is being used today. The `selinux-fedora` dir contains the new policy for fedora 24 with the changes for it to compile and work on the system. The fedora policy is from commit https://github.com/projectatomic/docker-selinux/commit/4a6ce94da5e34868642ebcc7a67da937d4c73283 Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-08-01 19:02:01 -04:00
/usr/bin/docker -- gen_context(system_u:object_r:docker_exec_t,s0)
/usr/bin/docker-novolume-plugin -- gen_context(system_u:object_r:docker_auth_exec_t,s0)
/usr/lib/docker/docker-novolume-plugin -- gen_context(system_u:object_r:docker_auth_exec_t,s0)
add selinux-policy and docker-engine-selinux rpm Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-08-25 15:46:35 -04:00
/usr/lib/systemd/system/docker.service -- gen_context(system_u:object_r:docker_unit_file_t,s0)
Add selinux policy per distro This adds the ability to have different profiles for individual distros and versions of the distro because they all ship with and depend on different versions of policy packages. The `selinux` dir contains the unmodified policy that is being used today. The `selinux-fedora` dir contains the new policy for fedora 24 with the changes for it to compile and work on the system. The fedora policy is from commit https://github.com/projectatomic/docker-selinux/commit/4a6ce94da5e34868642ebcc7a67da937d4c73283 Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-08-01 19:02:01 -04:00
/usr/lib/systemd/system/docker-novolume-plugin.service -- gen_context(system_u:object_r:docker_unit_file_t,s0)
add selinux-policy and docker-engine-selinux rpm Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-08-25 15:46:35 -04:00
/etc/docker(/.*)? gen_context(system_u:object_r:docker_config_t,s0)
/var/lib/docker(/.*)? gen_context(system_u:object_r:docker_var_lib_t,s0)
/var/lib/kublet(/.*)? gen_context(system_u:object_r:docker_var_lib_t,s0)
/var/lib/docker/vfs(/.*)? gen_context(system_u:object_r:svirt_sandbox_file_t,s0)
Add selinux policy per distro This adds the ability to have different profiles for individual distros and versions of the distro because they all ship with and depend on different versions of policy packages. The `selinux` dir contains the unmodified policy that is being used today. The `selinux-fedora` dir contains the new policy for fedora 24 with the changes for it to compile and work on the system. The fedora policy is from commit https://github.com/projectatomic/docker-selinux/commit/4a6ce94da5e34868642ebcc7a67da937d4c73283 Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-08-01 19:02:01 -04:00
/var/run/docker(/.*)? gen_context(system_u:object_r:docker_var_run_t,s0)
add selinux-policy and docker-engine-selinux rpm Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-08-25 15:46:35 -04:00
/var/run/docker\.pid -- gen_context(system_u:object_r:docker_var_run_t,s0)
/var/run/docker\.sock -s gen_context(system_u:object_r:docker_var_run_t,s0)
/var/run/docker-client(/.*)? gen_context(system_u:object_r:docker_var_run_t,s0)
Add selinux policy per distro This adds the ability to have different profiles for individual distros and versions of the distro because they all ship with and depend on different versions of policy packages. The `selinux` dir contains the unmodified policy that is being used today. The `selinux-fedora` dir contains the new policy for fedora 24 with the changes for it to compile and work on the system. The fedora policy is from commit https://github.com/projectatomic/docker-selinux/commit/4a6ce94da5e34868642ebcc7a67da937d4c73283 Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2016-08-01 19:02:01 -04:00
/var/run/docker/plugins(/.*)? gen_context(system_u:object_r:docker_plugin_var_run_t,s0)
/var/lock/lxc(/.*)? gen_context(system_u:object_r:docker_lock_t,s0)
/var/log/lxc(/.*)? gen_context(system_u:object_r:docker_log_t,s0)
add selinux-policy and docker-engine-selinux rpm Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-08-25 15:46:35 -04:00
/var/lib/docker/init(/.*)? gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/containers/.*/hosts gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/containers/.*/hostname gen_context(system_u:object_r:docker_share_t,s0)
/var/lib/docker/.*/config\.env gen_context(system_u:object_r:docker_share_t,s0)
Copy permalink