foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

podman: Allow containers to read system certificates

Browse source
This commit is contained in:
Timo Makinen 2022-07-09 16:09:00 +00:00
parent 7349c688c5
commit 613beb7ddf
3 changed files with 37 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
roles/podman/files/podman-certs.pp Normal file
View file

Binary file not shown.

12
roles/podman/files/podman-certs.te Normal file
View file

@ -0,0 +1,12 @@
module podman-certs 1.0;
require {
type cert_t;
type container_t;
class file { open read };
}
#============= container_t ==============
allow container_t cert_t:file read;
allow container_t cert_t:file open;