selinux: use container_device_plugin_t as RTE context

The `container_device_plugin_t` label type, allows communication with `kubelet_t` context: containers/container-selinux#178. The PodResourceAPI socket is an object created by Kubelet so it inherents the same process context, i.e. `kubelet_t`. Signed-off-by: Talor Itzhak <[email protected]>
k8stopologyawareschedwg · Aug 22, 2024 · e4ca8b9 · e4ca8b9
1 parent a9cfa28
commit e4ca8b9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/selinux/consts.go b/pkg/selinux/consts.go
@@ -17,6 +17,6 @@
 package selinux
 
 const (
-	RTEContextType  = "rte.process"
+	RTEContextType  = "container_device_plugin_t"
 	RTEContextLevel = "s0"
 )