diff --git a/peertube-server/templates/cil/postgres.cil b/peertube-server/templates/cil/postgres.cil index a26920c..018ac7d 100644 --- a/peertube-server/templates/cil/postgres.cil +++ b/peertube-server/templates/cil/postgres.cil @@ -4,6 +4,7 @@ (allow process process ( capability ( chown dac_override fowner fsetid kill net_bind_service setfcap setgid setpcap setuid sys_chroot ))) (allow process postgresql_port_t ( tcp_socket ( name_bind ))) + (allow container_t default_t (dir (setattr))) (allow process default_t ( dir ( add_name create getattr ioctl lock open read remove_name rmdir search setattr write ))) (allow process default_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write link))) (allow process default_t ( fifo_file ( getattr read write append ioctl lock open )))