Skip to content

Commit

Permalink
Merge pull request #334 from ffromani/add-context-0.19
Browse files Browse the repository at this point in the history
[release-0.19][manual] selinux: add kubelet_var_lib_t permissions
  • Loading branch information
ffromani authored Dec 9, 2024
2 parents 81043c6 + 480ba57 commit 37d4815
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions pkg/assets/selinux/policy/ocp_v4.16.cil
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,6 @@
;
; Allow to RTE pod connect, read and write permissions to /var/lib/kubelet/pod-resource/kubelet.sock
(allow process container_var_lib_t (sock_file (open getattr read write ioctl lock append)))
(allow process kubelet_var_lib_t (sock_file (open getattr read write ioctl lock append)))
(allow process kubelet_t (unix_stream_socket (connectto)))
)

0 comments on commit 37d4815

Please sign in to comment.