A container using the SELinux domain of container_logreader_t to watch container logs on the host at /var/log cannot access the logs from /var/log/containers since those logs are a symbolic link to /var/log/pods.  All other log files in /var/log are accessible just not ones that are symlinks.

    100%

    1. Create symlinks in /var/log
    2. Use container_logreader_t
    3. Attempt follow symlinks to watch attributes on files     

    Permission denied

    No permission issues