Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

container: set default context for local-path-provisioner #612

Merged
merged 1 commit into from
Apr 28, 2023
Merged

container: set default context for local-path-provisioner #612

merged 1 commit into from
Apr 28, 2023

Conversation

jcpunk
Copy link
Contributor

@jcpunk jcpunk commented Apr 18, 2023

The kubernetes local-path-provisioner uses either
/opt/local-path-provisioner or
/var/local-path-provisioner for its physical volumes

@jcpunk
Copy link
Contributor Author

jcpunk commented Apr 20, 2023

Moving this to the container specific selinux policy containers/container-selinux#228

@jcpunk jcpunk closed this Apr 20, 2023
@0xC0ncord
Copy link
Contributor

container-selinux is an add-on policy for Fedora and derivatives (RHEL, Rocky, etc.) specifically while refpolicy aims to have wider compatibility. Your PR is still relevant here if you're willing to reopen this.

That being said, the only thing I would change is to split the (var|opt) regex into separate lines so that it is more consistent with the refpolicy code style.

@jcpunk jcpunk reopened this Apr 26, 2023
@jcpunk
Copy link
Contributor Author

jcpunk commented Apr 26, 2023

I've reopened this PR and in theory made the changes you suggested.

policy/modules/services/container.fc Outdated Show resolved Hide resolved
The kubernetes local-path-provisioner uses either
/opt/local-path-provisioner or
/var/local-path-provisioner for its physical volumes

Signed-off-by: Pat Riehecky <[email protected]>
@pebenito pebenito merged commit d22e18a into SELinuxProject:master Apr 28, 2023
56 checks passed
@jcpunk jcpunk deleted the local-path-provisioner branch April 28, 2023 20:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants