diff --git a/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil b/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil new file mode 100644 index 00000000..f5af8e36 --- /dev/null +++ b/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil @@ -0,0 +1,7 @@ +(typeattributeset cil_gen_require var_run_t) +(typeattributeset cil_gen_require afterburn_t) +(typeattributeset cil_gen_require ssh_home_t) +(allow afterburn_t ssh_home_t (dir (read search))) +(allow afterburn_t ssh_home_t (dir (open))) +(allow afterburn_t var_run_t (dir (add_name create write))) +(allow afterburn_t var_run_t (file (create open write))) \ No newline at end of file