Allow container domains to search through any directories

Signed-off-by: Daniel J Walsh <[email protected]>
containers · Apr 9, 2020 · 9ce0dac · 9ce0dac
1 parent fd55ae0
commit 9ce0dac
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.130.0)
+policy_module(container, 2.131.0)
 gen_require(`
 	class passwd rootok;
 ')
@@ -475,6 +475,7 @@ fs_unmount_fusefs(container_runtime_domain)
 fs_exec_fusefs_files(container_runtime_domain)
 
 optional_policy(`
+    files_search_all(container_domain)
     container_read_share_files(container_domain)
     container_exec_share_files(container_domain)
     allow container_domain container_ro_file_t:file execmod;