rawselinuxprofile

RawSelinuxProfile is the Schema for the rawselinuxprofiles API. The name is used as the name of a CIL block, which has to start with a letter and must not contain dots. Existing objects are exempt, so that they can still be updated and deleted. The policy is placed into that block. Statements which change the global policy, like typepermissive, are rejected, but the statements may still refer to global types, attributes and blocks: allow rules for global types like container_t, typeattributeset and in statements can affect other workloads. Only cluster admins should be allowed to write raw SELinux profiles.