Text file src/github.com/Microsoft/hcsshim/pkg/securitypolicy/open_door.rego

Documentation: github.com/Microsoft/hcsshim/pkg/securitypolicy

     1package policy
     2
     3api_version := "@@API_VERSION@@"
     4
     5mount_device := {"allowed": true}
     6mount_overlay := {"allowed": true}
     7create_container := {"allowed": true, "env_list": null, "allow_stdio_access": true}
     8unmount_device := {"allowed": true}
     9unmount_overlay := {"allowed": true}
    10exec_in_container := {"allowed": true, "env_list": null}
    11exec_external := {"allowed": true, "env_list": null, "allow_stdio_access": true}
    12shutdown_container := {"allowed": true}
    13signal_container_process := {"allowed": true}
    14plan9_mount := {"allowed": true}
    15plan9_unmount := {"allowed": true}
    16get_properties := {"allowed": true}
    17dump_stacks := {"allowed": true}
    18runtime_logging := {"allowed": true}
    19load_fragment := {"allowed": true}
    20scratch_mount := {"allowed": true}
    21scratch_unmount := {"allowed": true}

View as plain text