github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-06-24 14:32:33 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #8837 from microsoft/danmihai1/allow_storages

Browse Source 
genpolicy: temporarily disable allow_storages()
This commit is contained in:
Dan Mihai 2024-01-16 07:10:49 -08:00 committed by GitHub
commit 13f2398fe8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/tools/genpolicy/rules.rego
View File

@ -428,7 +428,8 @@ allow_by_bundle_or_sandbox_id(p_oci, i_oci, p_storages, i_storages) {
allow_mount(p_oci, i_mount, bundle_id, sandbox_id) allow_mount(p_oci, i_mount, bundle_id, sandbox_id)
} }
allow_storages(p_storages, i_storages, bundle_id, sandbox_id) # TODO: enable allow_storages() after fixing https://github.com/kata-containers/kata-containers/issues/8833
# allow_storages(p_storages, i_storages, bundle_id, sandbox_id)
print("allow_by_bundle_or_sandbox_id: true") print("allow_by_bundle_or_sandbox_id: true")
} }