diff --git a/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil b/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil new file mode 100644 index 00000000..1a32d159 --- /dev/null +++ b/overlay.d/50scos/usr/lib/okd/selinux/afterburn.cil @@ -0,0 +1,8 @@ +; https://issues.redhat.com/browse/RHEL-49735 +(typeattributeset cil_gen_require var_run_t) +(typeattributeset cil_gen_require afterburn_t) +(typeattributeset cil_gen_require ssh_home_t) +(allow afterburn_t ssh_home_t (dir (read search))) +(allow afterburn_t ssh_home_t (dir (open))) +(allow afterburn_t var_run_t (dir (add_name create write))) +(allow afterburn_t var_run_t (file (create open write)))