[gentoo-commits] proj/hardened-refpolicy:master commit in: config/appconfig-mls/, config/appconfig-mcs/, config/appconfig-standard/

[gentoo-commits] proj/hardened-refpolicy:master commit in: config/appconfig-mls/, config/appconfig-mcs/, config/appconfig-standard/

[Jason Zaman]

commit:     3a6f1fdc625af28d62c7906f4e8666a7ae8661dd
Author:     Kenton Groombridge <me <AT> concord <DOT> sh>
AuthorDate: Tue Jan 18 01:17:44 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Jan 30 01:15:06 2022 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3a6f1fdc

lxc_contexts: add ro_file and sandbox_lxc_process contexts

Signed-off-by: Kenton Groombridge <me <AT> concord.sh>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 config/appconfig-mcs/lxc_contexts      | 2 ++
 config/appconfig-mls/lxc_contexts      | 2 ++
 config/appconfig-standard/lxc_contexts | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/config/appconfig-mcs/lxc_contexts b/config/appconfig-mcs/lxc_contexts
index 659a0c7c..de397ed2 100644
--- a/config/appconfig-mcs/lxc_contexts
+++ b/config/appconfig-mcs/lxc_contexts
@@ -1,3 +1,5 @@
 process = "system_u:system_r:container_t:s0"
 content = "system_u:object_r:virt_var_lib_t:s0"
 file = "system_u:object_r:container_file_t:s0"
+ro_file = "system_u:object_r:container_ro_file_t:s0"
+sandbox_lxc_process = "system_u:system_r:container_t:s0"

diff --git a/config/appconfig-mls/lxc_contexts b/config/appconfig-mls/lxc_contexts
index 659a0c7c..de397ed2 100644
--- a/config/appconfig-mls/lxc_contexts
+++ b/config/appconfig-mls/lxc_contexts
@@ -1,3 +1,5 @@
 process = "system_u:system_r:container_t:s0"
 content = "system_u:object_r:virt_var_lib_t:s0"
 file = "system_u:object_r:container_file_t:s0"
+ro_file = "system_u:object_r:container_ro_file_t:s0"
+sandbox_lxc_process = "system_u:system_r:container_t:s0"

diff --git a/config/appconfig-standard/lxc_contexts b/config/appconfig-standard/lxc_contexts
index 2cf33ddb..f2d6ef9b 100644
--- a/config/appconfig-standard/lxc_contexts
+++ b/config/appconfig-standard/lxc_contexts
@@ -1,3 +1,5 @@
 process = "system_u:system_r:container_t"
 content = "system_u:object_r:virt_var_lib_t"
 file = "system_u:object_r:container_file_t"
+ro_file = "system_u:object_r:container_ro_file_t:s0"
+sandbox_lxc_process = "system_u:system_r:container_t:s0"