Ian, docker:privileged allows it: 'change_profile unsafe /**,'. This is technically for transitioning to unconfined (since there isn't an 'unconfined' profile, we can't specify it in the policy), but it allows transitioning containers (and itself) to other profiles.
Ian, docker:privileged allows it: 'change_profile unsafe /**,'. This is technically for transitioning to unconfined (since there isn't an 'unconfined' profile, we can't specify it in the policy), but it allows transitioning containers (and itself) to other profiles.