Default to allowing containers to use dri devices

Fixes: https://github.com/containers/container-selinux/issues/269

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh 2023-11-28 12:18:09 -05:00
parent 3c47d8e340
commit e53b5070e0
No known key found for this signature in database
GPG Key ID: A2DF901DABE2C028
1 changed files with 2 additions and 2 deletions

View File

@ -1,4 +1,4 @@
policy_module(container, 2.225.1)
policy_module(container, 2.226.0)
gen_require(`
class passwd rootok;
@ -43,7 +43,7 @@ gen_tunable(container_use_devices, false)
## Allow containers to use any dri device volume mounted into container
## </p>
## </desc>
gen_tunable(container_use_dri_devices, false)
gen_tunable(container_use_dri_devices, true)
## <desc>
## <p>