Allow containers to mount tmpfs_t file systems

Signed-off-by: Radim Hrazdil <[email protected]>
containers · Nov 15, 2022 · 251c530 · 251c530
1 parent 7fafd46
commit 251c530
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/container.te b/container.te
@@ -836,6 +836,7 @@ container_spc_stream_connect(container_domain)
 fs_dontaudit_remount_tmpfs(container_domain)
 dev_dontaudit_mounton_sysfs(container_domain)
 dev_dontaudit_mounton_sysfs(container_domain)
+allow container_t tmpfs_t:filesystem { mount };
 
 dontaudit container_domain container_runtime_tmpfs_t:dir read;
 allow container_domain container_runtime_tmpfs_t:dir mounton;