37b78d
Add rules for container domains to make writing custom policy easier Allow shell_exec_t as a container_runtime_t entrypoint