[PATCH v4 0/1] selinux: Transition to pasta_t in containers

1 more change: allow systemd_user_runtimedir_t to remove the netns folders; otherwise, upon logout you'll get the following error: AVC avc: denied { rmdir } for pid=59008 comm="systemd-user-ru" name="netns" dev="tmpfs" ino=80 scontext=system_u:system_r:systemd_user_runtimedir_t:s0 tcontext=user_u:object_r:ifconfig_var_run_t:s0 tclass=dir permissive=1 Thanks, -- Max Max Chernoff (1): selinux: Transition to pasta_t in containers contrib/selinux/pasta.fc | 10 +++++---- contrib/selinux/pasta.te | 44 +++++++++++++++++++++++++++++++++++++++- 2 files changed, 49 insertions(+), 5 deletions(-) -- 2.49.0