Skip to content

selinux: Add lvm_control_t:chr_file mounton #28

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
zmc merged 1 commit into from
Sep 8, 2025
Merged

selinux: Add lvm_control_t:chr_file mounton #28

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified ceph_devstack/ceph_devstack.pp
View file
Open in desktop
Binary file not shown.
2 changes: 2 additions & 0 deletions ceph_devstack/ceph_devstack.te
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ require {
class bpf prog_load;
class bpf map_create;

type lvm_control_t;
type fuse_device_t;

type tun_tap_device_t;
Expand Down Expand Up @@ -111,6 +112,7 @@ allow container_init_t system_map_t:file mounton;
allow container_init_t mtrr_device_t:file mounton;
allow container_init_t self:bpf prog_load;
allow container_init_t self:bpf map_create;
allow container_init_t lvm_control_t:chr_file mounton;
allow container_init_t fuse_device_t:chr_file mounton;
allow container_init_t fixed_disk_device_t:blk_file mounton;
allow container_init_t tun_tap_device_t:chr_file mounton;