diff --git a/ceph_devstack/ceph_devstack.pp b/ceph_devstack/ceph_devstack.pp index 978a9398..f507aede 100644 Binary files a/ceph_devstack/ceph_devstack.pp and b/ceph_devstack/ceph_devstack.pp differ diff --git a/ceph_devstack/ceph_devstack.te b/ceph_devstack/ceph_devstack.te index 41a984f7..7451a521 100644 --- a/ceph_devstack/ceph_devstack.te +++ b/ceph_devstack/ceph_devstack.te @@ -70,6 +70,7 @@ require { class bpf prog_load; class bpf map_create; + type lvm_control_t; type fuse_device_t; type tun_tap_device_t; @@ -111,6 +112,7 @@ allow container_init_t system_map_t:file mounton; allow container_init_t mtrr_device_t:file mounton; allow container_init_t self:bpf prog_load; allow container_init_t self:bpf map_create; +allow container_init_t lvm_control_t:chr_file mounton; allow container_init_t fuse_device_t:chr_file mounton; allow container_init_t fixed_disk_device_t:blk_file mounton; allow container_init_t tun_tap_device_t:chr_file mounton;