container: allow reading generic certs

There are cases where one may want to mount certs on the host into a container. Signed-off-by: Kenton Groombridge <[email protected]>
SELinuxProject · Aug 16, 2024 · 9ab94df · 9ab94df
1 parent 9f37f86
commit 9ab94df
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/services/container.te b/policy/modules/services/container.te
@@ -380,6 +380,7 @@ libs_dontaudit_setattr_lib_files(container_domain)
 miscfiles_read_localization(container_domain)
 miscfiles_dontaudit_setattr_fonts_cache_dirs(container_domain)
 miscfiles_read_fonts(container_domain)
+miscfiles_read_generic_certs(container_domain)
 
 mta_dontaudit_read_spool_symlinks(container_domain)