containers
/
container-selinux
mirror of https://github.com/containers/container-selinux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Default to allowing containers to use dri devices 

Fixes: https://github.com/containers/container-selinux/issues/269

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh 2023-11-28 12:18:09 -05:00
parent 3c47d8e340
commit e53b5070e0
No known key found for this signature in database
GPG Key ID: A2DF901DABE2C028
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
container.te
View File

@ -1,4 +1,4 @@
policy_module(container, 2.225.1) policy_module(container, 2.226.0)
gen_require(` gen_require(`
class passwd rootok; class passwd rootok;
@ -43,7 +43,7 @@ gen_tunable(container_use_devices, false)
## Allow containers to use any dri device volume mounted into container ## Allow containers to use any dri device volume mounted into container
## </p> ## </p>
## </desc> ## </desc>
gen_tunable(container_use_dri_devices, false) gen_tunable(container_use_dri_devices, true)
## <desc> ## <desc>
## <p> ## <p>