Give selinux pcp_pmcd_t type access to /var/lib/docker

Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
2016-03-21 16:27:59 -07:00 · 2016-03-21 16:27:59 -07:00 · 00bf3c85d0
parent 7bbf58ed0d
commit 00bf3c85d0
1 changed files with 7 additions and 0 deletions
--- a/contrib/docker-engine-selinux/docker.te
+++ b/contrib/docker-engine-selinux/docker.te
@ -405,3 +405,10 @@ optional_policy(`

     dontaudit svirt_sandbox_domain domain:key {search link};
 ')
+
+optional_policy(`
+	gen_require(`
+		type pcp_pmcd_t;
+	')
+	docker_manage_lib_files(pcp_pmcd_t)
+')