remove assess to user_home_t from caddy container

karuboniru · Jan 27, 2024 · eb410e0 · eb410e0
1 parent 464f0ea
commit eb410e0
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/cils/container_caddy.cil b/cils/container_caddy.cil
@@ -2,9 +2,6 @@
     (blockinherit container)
     (blockinherit net_container)
     (allow process process ( capability ( net_bind_service ))) 
-
-    (allow process user_home_t ( dir ( watch getattr ioctl lock open read search ))) 
-    (allow process user_home_t ( file ( watch getattr ioctl lock open read ))) 
 
     (allow process var_run_t ( sock_file ( write )))
     (allow process cockpit_ws_t ( unix_stream_socket ( connectto )))