Merge pull request SELinuxProject#746 from yizhao1/cryptsetup

fix some contexts

policy/modules/services/container.fc

@@ -40,6 +40,7 @@ HOME_DIR/\.docker(/.*)?		gen_context(system_u:object_r:container_conf_home_t,s0)
 /etc/containerd(/.*)?		gen_context(system_u:object_r:container_config_t,s0)
 
 /run/containers(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
+/run/crun(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 /run/libpod(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 /run/runc(/.*)?		gen_context(system_u:object_r:container_runtime_t,s0)
 

policy/modules/system/lvm.fc

@@ -144,6 +144,7 @@
 /var/cache/multipathd(/.*)?		gen_context(system_u:object_r:lvm_metadata_t,s0)
 /var/lib/multipath(/.*)?		gen_context(system_u:object_r:lvm_var_lib_t,s0)
 /var/lock/lvm(/.*)?			gen_context(system_u:object_r:lvm_lock_t,s0)
+/run/cryptsetup(/.*)?			gen_context(system_u:object_r:lvm_runtime_t,s0)
 /run/multipathd\.sock		-s	gen_context(system_u:object_r:lvm_runtime_t,s0)
 /run/dmevent.*				gen_context(system_u:object_r:lvm_runtime_t,s0)
 /run/lvm(/.*)?				gen_context(system_u:object_r:lvm_runtime_t,s0)

policy/modules/system/lvm.te

@@ -94,7 +94,7 @@ files_var_lib_filetrans(lvm_t, lvm_var_lib_t, { dir file })
 manage_dirs_pattern(lvm_t, lvm_runtime_t, lvm_runtime_t)
 manage_files_pattern(lvm_t, lvm_runtime_t, lvm_runtime_t)
 manage_sock_files_pattern(lvm_t, lvm_runtime_t, lvm_runtime_t)
-files_runtime_filetrans(lvm_t, lvm_runtime_t, { file sock_file })
+files_runtime_filetrans(lvm_t, lvm_runtime_t, { dir file sock_file })
 
 read_files_pattern(lvm_t, lvm_etc_t, lvm_etc_t)
 allow lvm_t lvm_etc_t:file map;
@@ -220,7 +220,6 @@ sysnet_write_config(lvm_t)
 userdom_use_inherited_user_terminals(lvm_t)
 
 ifdef(`init_systemd',`
-	fs_getattr_cgroup(lvm_t)
 	fs_list_pstore_dirs(lvm_t)
 	fs_manage_hugetlbfs_dirs(lvm_t)
 	fs_search_cgroup_dirs(lvm_t)