containers
/
container-selinux
mirror of https://github.com/containers/container-selinux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
SELinux policy files for Container Runtimes
688 Commits 8 Branches 166 Tags 1 MiB
Roff 91.8%
Makefile 6.4%
Shell 1.8%
Go to file
openshift-merge-bot[bot] 36e8f213b7
Merge pull request #381 from rhatdan/main 
BUmp to v2.238.0
 		2025-05-30 16:00:49 +00:00
.fmf Packit: run Podman SELinux-specific tests on public testing farm 2023-04-03 16:21:45 +05:30
plans TMT: simplify podman tests 2025-01-30 21:24:41 +05:30
rpm RPM: empty placeholder check section to silence rpmlint 2025-04-21 19:13:21 +05:30
test TMT: simplify podman tests 2025-01-30 21:24:41 +05:30
udica-templates Add udica policy templates 2021-09-08 20:33:54 +02:00
.gitignore Additional labeling for ocid 2017-01-06 15:26:49 -05:00
.packit.yaml Enable aarch64 testing 2025-01-30 21:24:41 +05:30
CODE-OF-CONDUCT.md Add Code of Conduct 2020-02-08 16:04:25 -05:00
LICENSE Fix license of docker-selinux should be GPLV2 2015-11-30 15:40:44 -05:00
Makefile Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00
NOTICE Added Copyright Notice file 2020-10-14 16:26:18 -05:00
OWNERS OWNERS: add wrabcak and zpytela 2025-02-11 17:39:40 +05:30
README.md Fix minor typo in README.md (Libvert -> Libvirt) 2023-06-08 13:01:06 -04:00
SECURITY.md Add SECURITY.md 2021-04-20 08:03:18 -04:00
container.fc add container_ro_file_t to the podman artifact store 2025-02-26 17:03:03 +01:00
container.if add container_ro_file_t to the podman artifact store 2025-02-26 17:03:03 +01:00
container.te BUmp to v2.238.0 2025-05-30 11:43:54 -04:00
container_contexts Add support for running containers within containers 2020-04-15 09:25:16 -04:00
container_selinux.8 Bump to v2.236.0 2025-03-12 06:53:54 -04:00
container_u Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00

README.md

SELinux Policy for Container Runtimes

Blogs on SELinux Policy

Container Labeling
Explains container_t vs container_var_lib_t

container_t versus svirt_lxc_net_t
Clarifys container_t versus svirt_lxc_net_t aliases

SELinux, Podman, and Libvirt
Information regarding SELinux blocking Podman container from talking to Libvirt

Caution Relabeling Volumes with Container Runtimes
Explains effects of relabeling volumes with :Z

Container Domains (Types)
Explanation of SELinux Domain types.

Containers and MLS
Container-selinux policy support of MLS (Multi Level Security).