ansible/roles/homeassistant/files/homeassistant-local.te

23 lines
632 B
Text

module homeassistant-local 1.1;
require {
type container_t;
type system_dbusd_var_run_t;
type system_dbusd_t;
type bluetooth_t;
class dir read;
class sock_file write;
class unix_stream_socket connectto;
class dbus send_msg;
}
#============= bluetooth_t ==============
allow bluetooth_t container_t:dbus send_msg;
#============= container_t ==============
allow container_t bluetooth_t:dbus send_msg;
allow container_t system_dbusd_t:dbus send_msg;
allow container_t system_dbusd_t:unix_stream_socket connectto;
allow container_t system_dbusd_var_run_t:dir read;
allow container_t system_dbusd_var_run_t:sock_file write;