Merge pull request #124 from rhatdan/rand

Allow containers to write to /dev/rand, /dev/urand
containers · Mar 22, 2021 · d89a599 · d89a599
2 parents e78ac4f + 690076c
commit d89a599
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/container.te b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.158.0)
+policy_module(container, 2.159.0)
 gen_require(`
 	class passwd rootok;
 ')
@@ -885,7 +885,9 @@ fs_mounton_cgroup(container_t)
 fs_unmount_cgroup(container_t)
 
 dev_read_rand(container_domain)
+dev_write_rand(container_domain)
 dev_read_urand(container_domain)
+dev_write_urand(container_domain)
 
 files_read_kernel_modules(container_domain)