aljaz/kata-containers
1
0
Fork 0
mirror of https://github.com/aljazceru/kata-containers.git synced 2025-12-17 14:24:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

policy: allow access to ReseedRandomDev

Browse Source 
Allow access to the ReseedRandomDev endpoint by default. Using false
for ReseedRandomDevRequest was unintended.

Fixes: #8225

Signed-off-by: Dan Mihai <dmihai@microsoft.com>
This commit is contained in:
Dan Mihai
2023-10-13 19:18:36 +00:00
parent 1974d13122
commit b6ec621389
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/kata-opa/allow-all-except-exec-process.rego
View File

@@ -19,7 +19,7 @@ default PullImageRequest := true
default ReadStreamRequest := true default ReadStreamRequest := true
default RemoveContainerRequest := true default RemoveContainerRequest := true
default RemoveStaleVirtiofsShareMountsRequest := true default RemoveStaleVirtiofsShareMountsRequest := true
default ReseedRandomDevRequest := false default ReseedRandomDevRequest := true
default ResumeContainerRequest := true default ResumeContainerRequest := true
default SetGuestDateTimeRequest := true default SetGuestDateTimeRequest := true
default SetPolicyRequest := true default SetPolicyRequest := true

2
src/kata-opa/allow-all.rego
View File

@@ -20,7 +20,7 @@ default PullImageRequest := true
default ReadStreamRequest := true default ReadStreamRequest := true
default RemoveContainerRequest := true default RemoveContainerRequest := true
default RemoveStaleVirtiofsShareMountsRequest := true default RemoveStaleVirtiofsShareMountsRequest := true
default ReseedRandomDevRequest := false default ReseedRandomDevRequest := true
default ResumeContainerRequest := true default ResumeContainerRequest := true
default SetGuestDateTimeRequest := true default SetGuestDateTimeRequest := true
default SetPolicyRequest := true default SetPolicyRequest := true