Skip to content

Commit aaa7d55

Browse files
authored
Merge pull request #412 from haircommander/sshd-engine-t
container_engine_t: add necessary permissions to ssh in userns container
2 parents 32f5b9b + d27647a commit aaa7d55

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

container.te

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1487,6 +1487,7 @@ allow container_engine_t kernel_t:system module_request;
14871487
allow container_engine_t null_device_t:chr_file { mounton setattr_chr_file_perms };
14881488
allow container_engine_t random_device_t:chr_file mounton;
14891489
allow container_engine_t self:netlink_tcpdiag_socket nlmsg_read;
1490+
allow container_engine_t self:netlink_audit_socket nlmsg_relay;
14901491
allow container_engine_t urandom_device_t:chr_file mounton;
14911492
allow container_engine_t zero_device_t:chr_file mounton;
14921493
allow container_engine_t container_file_t:sock_file mounton;

0 commit comments

Comments
 (0)