From 8ad6ebd9aba232561546c3f4c61575e832170f8b Mon Sep 17 00:00:00 2001
From: Zack Cerza <zack@cerza.org>
Date: Wed, 6 Aug 2025 19:12:44 -0600
Subject: [PATCH] selinux: Add lvm_control_t:chr_file mounton

Signed-off-by: Zack Cerza <zack@cerza.org>
---
 ceph_devstack/ceph_devstack.pp | Bin 13741 -> 13915 bytes
 ceph_devstack/ceph_devstack.te |   2 ++
 2 files changed, 2 insertions(+)

diff --git a/ceph_devstack/ceph_devstack.pp b/ceph_devstack/ceph_devstack.pp
index 978a9398060941450c05cb0f974c92e4a7995c41..f507aedebe8698367515a3773f8f62b24b02c05c 100644
GIT binary patch
delta 167
zcmZ3ReLF{}|9{O-Mg|53CLk68VokY?Li?C_6@g3;<^bWzhRo8uDXC>8C6)0dyg(5J
zkO+59S#ErCeqKpYe$M89Owo*tiXh?5r7ZuL8Pz8*;B=mB%_B2;HmApCY0lrgObm>Z
r1H=+0i-?yqGEQE|Bt3Zp6AuV)-Y;&;1l0RiQkoxRII^)^Qj4Vl4v8(V

delta 94
zcmcbevo>3(|9{O-Mg|53CLk68;%eEALi?C_6@W|-<^bWziaf%TKQIYw)@6=loXo;3
rvw0EAKW0X?%?mje@l9SXUOHJo(qwahge?=J!sI?F>CMNarb+_<SQZ$z

diff --git a/ceph_devstack/ceph_devstack.te b/ceph_devstack/ceph_devstack.te
index 41a984f7..7451a521 100644
--- a/ceph_devstack/ceph_devstack.te
+++ b/ceph_devstack/ceph_devstack.te
@@ -70,6 +70,7 @@ require {
 	class bpf prog_load;
 	class bpf map_create;
 
+	type lvm_control_t;
 	type fuse_device_t;
 
 	type tun_tap_device_t;
@@ -111,6 +112,7 @@ allow container_init_t system_map_t:file mounton;
 allow container_init_t mtrr_device_t:file mounton;
 allow container_init_t self:bpf prog_load;
 allow container_init_t self:bpf map_create;
+allow container_init_t lvm_control_t:chr_file mounton;
 allow container_init_t fuse_device_t:chr_file mounton;
 allow container_init_t fixed_disk_device_t:blk_file mounton;
 allow container_init_t tun_tap_device_t:chr_file mounton;