Update selinux policy: ignore some violations

karuboniru · Jan 31, 2024 · 6253ed1 · 6253ed1
1 parent eb410e0
commit 6253ed1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/cils/comiclib.cil b/cils/comiclib.cil
@@ -1,7 +1,8 @@
 (block comiclib
     (blockinherit container)
 
-
     (allow process user_home_t ( dir ( watch getattr ioctl lock open read search ))) 
     (allow process user_home_t ( file ( watch getattr ioctl lock open read ))) 
+
+    (dontaudit process node_t ( tcp_socket ( node_bind ) ) )
 )
diff --git a/cils/container_wireguard.cil b/cils/container_wireguard.cil
@@ -4,4 +4,5 @@
 
     (allow process container_wireguard.process ( netlink_route_socket ( nlmsg_write )))
 
+    (dontaudit process cgroup_t (dir (write) ))
 )
Original file line number	Diff line number	Diff line change
Expand Up		@@ -4,4 +4,5 @@

		(allow process container_wireguard.process ( netlink_route_socket ( nlmsg_write )))

		(dontaudit process cgroup_t (dir (write) ))
		)