containers
/
container-selinux
mirror of https://github.com/containers/container-selinux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
SELinux policy files for Container Runtimes
626 Commits 8 Branches 166 Tags 1 MiB
Roff 91.8%
Makefile 6.4%
Shell 1.8%
Go to file
Daniel J Walsh 4fda08e915 Update container-selinux.8 man page 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 		2024-05-31 11:46:41 -04:00
.fmf Packit: run Podman SELinux-specific tests on public testing farm 2023-04-03 16:21:45 +05:30
plans Packit/TMT: upstream maintenance of downstream gating tests 2024-05-28 10:31:12 -04:00
rpm Add ownership of /usr/share/udica (#312) 2024-05-31 11:46:21 -04:00
test Packit/TMT: upstream maintenance of downstream gating tests 2024-05-28 10:31:12 -04:00
udica-templates Add udica policy templates 2021-09-08 20:33:54 +02:00
.gitignore Additional labeling for ocid 2017-01-06 15:26:49 -05:00
.packit.yaml Packit/TMT: upstream maintenance of downstream gating tests 2024-05-28 10:31:12 -04:00
CODE-OF-CONDUCT.md Add Code of Conduct 2020-02-08 16:04:25 -05:00
LICENSE Fix license of docker-selinux should be GPLV2 2015-11-30 15:40:44 -05:00
Makefile Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00
NOTICE Added Copyright Notice file 2020-10-14 16:26:18 -05:00
README.md Fix minor typo in README.md (Libvert -> Libvirt) 2023-06-08 13:01:06 -04:00
SECURITY.md Add SECURITY.md 2021-04-20 08:03:18 -04:00
container.fc Rename all /var/run file context entries to /run (#298) 2024-03-11 17:41:09 +05:30
container.if Fix kubernetes transition rule 2023-11-20 08:52:40 -05:00
container.te Update container-selinux.8 man page 2024-05-31 11:46:41 -04:00
container_contexts Add support for running containers within containers 2020-04-15 09:25:16 -04:00
container_selinux.8 Update container-selinux.8 man page 2024-05-31 11:46:41 -04:00
container_u Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00

README.md

SELinux Policy for Container Runtimes

Blogs on SELinux Policy

Container Labeling
Explains container_t vs container_var_lib_t

container_t versus svirt_lxc_net_t
Clarifys container_t versus svirt_lxc_net_t aliases

SELinux, Podman, and Libvirt
Information regarding SELinux blocking Podman container from talking to Libvirt

Caution Relabeling Volumes with Container Runtimes
Explains effects of relabeling volumes with :Z

Container Domains (Types)
Explanation of SELinux Domain types.

Containers and MLS
Container-selinux policy support of MLS (Multi Level Security).