From 087abd9a356861e65e5489b1307dc1564c9e6f2b Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Tue, 22 Aug 2023 14:18:18 +0200 Subject: Addresses prerequisite for cgroup_seclabel Only worls if the / of the cgroupfs is labeled with setxattr. systemd will apply this filecon. Signed-off-by: Dominick Grift --- src/misc.cil | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/misc.cil b/src/misc.cil index 73c45aa..e9f423c 100644 --- a/src/misc.cil +++ b/src/misc.cil @@ -49,7 +49,7 @@ (in cgroup - (filecon "/sys/fs/cgroup" dir ()) + (filecon "/sys/fs/cgroup" dir fs_context) (filecon "/sys/fs/cgroup/.*" any ()) (allow fs self (filesystem (associate))) -- cgit v1.2.3