Skip to content

Commit

Permalink
Merge pull request #225 from rhatdan/main
Browse files Browse the repository at this point in the history 
Add container_file_t and container_ro_file_t as user_home_type
  • Loading branch information
@rhatdan
rhatdan authored Apr 6, 2023
2 parents 5216df3 + 5b5f3b8 commit 36709f0
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions container.te
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
policy_module(container, 2.209.0)
policy_module(container, 2.210.0)

gen_require(`
class passwd rootok;
Expand Down Expand Up @@ -130,6 +130,7 @@ term_pty(container_devpts_t)

typealias container_ro_file_t alias { container_share_t docker_share_t };
files_mountpoint(container_ro_file_t)
userdom_user_home_content(container_ro_file_t)

type container_port_t alias docker_port_t;
corenet_port(container_port_t)
Expand Down Expand Up @@ -583,7 +584,6 @@ fs_unmount_fusefs(container_runtime_domain)
fs_exec_fusefs_files(container_runtime_domain)
storage_rw_fuse(container_runtime_domain)


optional_policy(`
files_search_all(container_domain)
container_read_share_files(container_domain)
Expand Down Expand Up @@ -814,7 +814,7 @@ gen_require(`
')
container_manage_files_template(container, container)

typeattribute container_file_t container_file_type;
typeattribute container_file_t container_file_type, user_home_type;
typeattribute container_t container_domain, container_net_domain, container_user_domain;
allow container_user_domain self:process getattr;
allow container_domain { container_var_lib_t container_ro_file_t container_file_t }:file entrypoint;
Expand Down

3 comments on commit 36709f0

@packit-as-a-service
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Based on your Packit configuration the settings of the rhcontainerbot/podman-next Copr project would need to be updated as follows:

field old value new value
chroots ['fedora-37-s390x', 'fedora-38-s390x', 'centos-stream+epel-next-8-ppc64le', 'fedora-37-aarch64', 'fedora-36-s390x', 'epel-9-aarch64', 'epel-8-ppc64le', 'centos-stream+epel-next-9-x86_64', 'epel-9-ppc64le', 'fedora-rawhide-x86_64', 'centos-stream+epel-next-8-x86_64', 'epel-8-aarch64', 'fedora-36-x86_64', 'centos-stream+epel-next-9-s390x', 'fedora-37-ppc64le', 'fedora-rawhide-aarch64', 'fedora-36-aarch64', 'fedora-36-ppc64le', 'centos-stream+epel-next-9-aarch64', 'fedora-38-x86_64', 'epel-8-x86_64', 'epel-9-s390x', 'fedora-38-ppc64le', 'fedora-rawhide-ppc64le', 'fedora-37-x86_64', 'fedora-rawhide-s390x', 'centos-stream+epel-next-8-aarch64', 'epel-9-x86_64', 'fedora-38-aarch64', 'epel-8-s390x'] ['centos-stream+epel-next-8-aarch64', 'centos-stream+epel-next-8-ppc64le', 'centos-stream+epel-next-8-x86_64', 'centos-stream+epel-next-9-aarch64', 'centos-stream+epel-next-9-s390x', 'centos-stream+epel-next-9-x86_64', 'centos-stream-8-x86_64', 'centos-stream-9-x86_64', 'epel-8-aarch64', 'epel-8-ppc64le', 'epel-8-s390x', 'epel-8-x86_64', 'epel-9-aarch64', 'epel-9-ppc64le', 'epel-9-s390x', 'epel-9-x86_64', 'fedora-36-aarch64', 'fedora-36-ppc64le', 'fedora-36-s390x', 'fedora-36-x86_64', 'fedora-37-aarch64', 'fedora-37-ppc64le', 'fedora-37-s390x', 'fedora-37-x86_64', 'fedora-38-aarch64', 'fedora-38-ppc64le', 'fedora-38-s390x', 'fedora-38-x86_64', 'fedora-rawhide-aarch64', 'fedora-rawhide-ppc64le', 'fedora-rawhide-s390x', 'fedora-rawhide-x86_64']

Diff of chroots:

+centos-stream-8-x86_64
+centos-stream-9-x86_64

Packit was unable to update the settings above as it is missing admin permissions on the rhcontainerbot/podman-next Copr project.

To fix this you can do one of the following:

  • Grant Packit admin permissions on the rhcontainerbot/podman-next Copr project on the permissions page.
  • Change the above Copr project settings manually on the settings page to match the Packit configuration.
  • Update the Packit configuration to match the Copr project settings.

Please retrigger the build, once the issue above is fixed.

@packit-as-a-service
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Based on your Packit configuration the settings of the rhcontainerbot/podman-next Copr project would need to be updated as follows:

field old value new value
chroots ['fedora-36-x86_64', 'fedora-37-s390x', 'fedora-38-aarch64', 'epel-9-ppc64le', 'epel-8-aarch64', 'epel-8-x86_64', 'epel-8-ppc64le', 'centos-stream+epel-next-9-x86_64', 'fedora-36-aarch64', 'centos-stream+epel-next-8-x86_64', 'fedora-rawhide-s390x', 'fedora-rawhide-x86_64', 'fedora-36-ppc64le', 'fedora-38-ppc64le', 'centos-stream+epel-next-8-ppc64le', 'centos-stream+epel-next-9-aarch64', 'epel-8-s390x', 'epel-9-aarch64', 'centos-stream+epel-next-8-aarch64', 'fedora-37-ppc64le', 'fedora-rawhide-ppc64le', 'fedora-37-aarch64', 'epel-9-x86_64', 'fedora-rawhide-aarch64', 'epel-9-s390x', 'fedora-38-s390x', 'fedora-37-x86_64', 'fedora-38-x86_64', 'centos-stream+epel-next-9-s390x', 'fedora-36-s390x'] ['centos-stream+epel-next-8-aarch64', 'centos-stream+epel-next-8-ppc64le', 'centos-stream+epel-next-8-x86_64', 'centos-stream+epel-next-9-aarch64', 'centos-stream+epel-next-9-s390x', 'centos-stream+epel-next-9-x86_64', 'centos-stream-8-x86_64', 'centos-stream-9-x86_64', 'epel-8-aarch64', 'epel-8-ppc64le', 'epel-8-s390x', 'epel-8-x86_64', 'epel-9-aarch64', 'epel-9-ppc64le', 'epel-9-s390x', 'epel-9-x86_64', 'fedora-36-aarch64', 'fedora-36-ppc64le', 'fedora-36-s390x', 'fedora-36-x86_64', 'fedora-37-aarch64', 'fedora-37-ppc64le', 'fedora-37-s390x', 'fedora-37-x86_64', 'fedora-38-aarch64', 'fedora-38-ppc64le', 'fedora-38-s390x', 'fedora-38-x86_64', 'fedora-rawhide-aarch64', 'fedora-rawhide-ppc64le', 'fedora-rawhide-s390x', 'fedora-rawhide-x86_64']

Diff of chroots:

+centos-stream-8-x86_64
+centos-stream-9-x86_64

Packit was unable to update the settings above as it is missing admin permissions on the rhcontainerbot/podman-next Copr project.

To fix this you can do one of the following:

  • Grant Packit admin permissions on the rhcontainerbot/podman-next Copr project on the permissions page.
  • Change the above Copr project settings manually on the settings page to match the Packit configuration.
  • Update the Packit configuration to match the Copr project settings.

Please retrigger the build, once the issue above is fixed.

@packit-as-a-service
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Based on your Packit configuration the settings of the rhcontainerbot/podman-next Copr project would need to be updated as follows:

field old value new value
chroots ['fedora-36-x86_64', 'fedora-37-s390x', 'fedora-38-aarch64', 'epel-9-ppc64le', 'epel-8-aarch64', 'epel-8-x86_64', 'epel-8-ppc64le', 'centos-stream+epel-next-9-x86_64', 'fedora-36-aarch64', 'centos-stream+epel-next-8-x86_64', 'fedora-rawhide-s390x', 'fedora-rawhide-x86_64', 'fedora-36-ppc64le', 'fedora-38-ppc64le', 'centos-stream+epel-next-8-ppc64le', 'centos-stream+epel-next-9-aarch64', 'epel-8-s390x', 'epel-9-aarch64', 'centos-stream+epel-next-8-aarch64', 'fedora-37-ppc64le', 'fedora-rawhide-ppc64le', 'fedora-37-aarch64', 'epel-9-x86_64', 'fedora-rawhide-aarch64', 'epel-9-s390x', 'fedora-38-s390x', 'fedora-37-x86_64', 'fedora-38-x86_64', 'centos-stream+epel-next-9-s390x', 'fedora-36-s390x'] ['centos-stream+epel-next-8-aarch64', 'centos-stream+epel-next-8-ppc64le', 'centos-stream+epel-next-8-x86_64', 'centos-stream+epel-next-9-aarch64', 'centos-stream+epel-next-9-s390x', 'centos-stream+epel-next-9-x86_64', 'centos-stream-8-x86_64', 'centos-stream-9-x86_64', 'epel-8-aarch64', 'epel-8-ppc64le', 'epel-8-s390x', 'epel-8-x86_64', 'epel-9-aarch64', 'epel-9-ppc64le', 'epel-9-s390x', 'epel-9-x86_64', 'fedora-36-aarch64', 'fedora-36-ppc64le', 'fedora-36-s390x', 'fedora-36-x86_64', 'fedora-37-aarch64', 'fedora-37-ppc64le', 'fedora-37-s390x', 'fedora-37-x86_64', 'fedora-38-aarch64', 'fedora-38-ppc64le', 'fedora-38-s390x', 'fedora-38-x86_64', 'fedora-rawhide-aarch64', 'fedora-rawhide-ppc64le', 'fedora-rawhide-s390x', 'fedora-rawhide-x86_64']

Diff of chroots:

+centos-stream-8-x86_64
+centos-stream-9-x86_64

Packit was unable to update the settings above as it is missing admin permissions on the rhcontainerbot/podman-next Copr project.

To fix this you can do one of the following:

  • Grant Packit admin permissions on the rhcontainerbot/podman-next Copr project on the permissions page.
  • Change the above Copr project settings manually on the settings page to match the Packit configuration.
  • Update the Packit configuration to match the Copr project settings.

Please retrigger the build, once the issue above is fixed.

Please sign in to comment.