diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2018-05-18 16:28:51 -0400 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-05-19 07:47:03 +0000 |
| commit | 9d7c50aa030ee70d507c414bb02f0add8ffa2835 (patch) | |
| tree | b4151e582e3e123be0dd55505ef3984073b579bf /Makefile | |
| parent | 4b804e85165a29f9d712f1ec4f289040f942f459 (diff) | |
| download | podman-9d7c50aa030ee70d507c414bb02f0add8ffa2835.tar.gz podman-9d7c50aa030ee70d507c414bb02f0add8ffa2835.tar.bz2 podman-9d7c50aa030ee70d507c414bb02f0add8ffa2835.zip | |
Tighten the security on the podman varlink socket
We only want root to be allowed to access this socket.
Also move socket to /run/podman directory. This requires
us to drop a podman.conf tmpfiles.d file.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #806
Approved by: mheon
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -15,6 +15,7 @@ MANDIR ?= ${PREFIX}/share/man SHAREDIR_CONTAINERS ?= ${PREFIX}/share/containers ETCDIR ?= ${DESTDIR}/etc ETCDIR_LIBPOD ?= ${ETCDIR}/crio +TMPFILESDIR ?= ${PREFIX}/lib/tmpfiles.d SYSTEMDDIR ?= ${PREFIX}/lib/systemd/system BUILDTAGS ?= seccomp $(shell hack/btrfs_tag.sh) $(shell hack/libdm_tag.sh) $(shell hack/btrfs_installed_tag.sh) $(shell hack/ostree_tag.sh) $(shell hack/selinux_tag.sh) PYTHON ?= /usr/bin/python3 @@ -208,6 +209,7 @@ install.docker: docker-docs install.systemd: install ${SELINUXOPT} -m 644 -D contrib/varlink/io.projectatomic.podman.socket ${SYSTEMDDIR}/io.projectatomic.podman.socket install ${SELINUXOPT} -m 644 -D contrib/varlink/io.projectatomic.podman.service ${SYSTEMDDIR}/io.projectatomic.podman.service + install ${SELINUXOPT} -m 644 -D contrib/varlink/podman.conf ${TMPFILESDIR}/podman.conf uninstall: for i in $(filter %.1,$(MANPAGES)); do \ |