Originally all the domains had 'svirt' in the name: https://www.projectatomic.io/blog/2016/03/dwalsh_selinux_containers/ https://www.projectatomic.io/blog/2016

Originally all the domains had 'svirt' in the name: https://www.projectatomic.io/blog/2016/03/dwalsh_selinux_containers/ https://www.projectatomic.io/blog/2016/03/dwalsh_selinux_con... These days containers have their own domains: https://www.mankier.com/8/container_selinux https://www.mankier.com/8/container_selinux As you say, the principle is the same. [edit] container_t is (or was?) an alias for svirt_lxc_net_t: https://danwalsh.livejournal.com/79191.html https://danwalsh.livejournal.com/79191.html