container: set context for /run/crun

/run/crun is the runtime directory for crun. Signed-off-by: Yi Zhao <[email protected]>
SELinuxProject · Dec 30, 2023 · 27b2c1a · 27b2c1a
1 parent 060d661
commit 27b2c1a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/policy/modules/services/container.fc b/policy/modules/services/container.fc
@@ -41,6 +41,7 @@ HOME_DIR/\.docker(/.*)?		gen_context(system_u:object_r:container_conf_home_t,s0)
 
 /run/containers(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 /run/libpod(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
+/run/crun(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 /run/runc(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 
 /run/docker(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)