Hi everybody, I am studying the systemd-nspawn containers and I noticed
that there is a bug[1] in SELinux policy that prevents the user to use
commands like
# machinectl login foo
# machinectl start foo
# machinectl stop foo
Meanwhile the SELinux maintainers patch such bug, I would like to
manually adjust SELinux policy to allow machinectl and at the same time
to not leave security holes around. Since I am not a SELinux expert, I
would like to ask you for suggestions.
Thank you for your time
Best regards
[1]:
https://bugzilla.redhat.com/show_bug.cgi?id=1416540