Allow unconfined_r to transition to container_user_r

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
containers · Jan 19, 2024 · c4fbc45 · c4fbc45
1 parent cffb801
commit c4fbc45
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/container.te b/container.te
@@ -1532,6 +1532,9 @@ role container_user_r types container_user_domain;
 role container_user_r types container_net_domain;
 role container_user_r types container_file_type;
 container_runtime_run(container_user_t, container_user_r)
+unconfined_role_change_to(container_user_r)
+
+container_use_ptys(container_user_t)
 
 fs_manage_cgroup_dirs(container_user_t)
 fs_manage_cgroup_files(container_user_t)