Files
Maciej Borzecki bf3af32bbc data/selinux: update policy to allow stat of /run/systemd/container (#13872)
Since 3cfa28a0fc snap-confine checks if the system is running in a container. It
does so by reading /run/systemd/container. Extend the SELinux to allow basic
search operations within /run/systemd. It is unlikely anyone runs snapd in a
container where the SELinux is enabled on the host, so the actual file read
permissions are likely not needed.

Signed-off-by: Maciej Borzecki <maciej.borzecki@canonical.com>
2024-04-24 11:27:52 +02:00
..
2022-02-23 11:48:48 +01:00