containers
/
container-selinux
mirror of https://github.com/containers/container-selinux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
SELinux policy files for Container Runtimes
585 Commits 8 Branches 166 Tags 1 MiB
Roff 91.8%
Makefile 6.4%
Shell 1.8%
Go to file
Daniel J Walsh d73beea8a4
Merge pull request #286 from rhatdan/kube 
Fix kubernetes transition rule
 		2023-11-22 12:36:50 -05:00
.fmf Packit: run Podman SELinux-specific tests on public testing farm 2023-04-03 16:21:45 +05:30
plans Packit/TMT: enable CentOS Stream, RHEL [8,9] tests 2023-10-09 15:34:35 -04:00
rpm rpm: replace bcond_ macros with define 2023-06-23 09:00:30 -04:00
udica-templates Add udica policy templates 2021-09-08 20:33:54 +02:00
.gitignore Additional labeling for ocid 2017-01-06 15:26:49 -05:00
.packit.yaml TMT: update RHEL test envs 2023-10-25 17:40:53 +05:30
CODE-OF-CONDUCT.md Add Code of Conduct 2020-02-08 16:04:25 -05:00
LICENSE Fix license of docker-selinux should be GPLV2 2015-11-30 15:40:44 -05:00
Makefile Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00
NOTICE Added Copyright Notice file 2020-10-14 16:26:18 -05:00
README.md Fix minor typo in README.md (Libvert -> Libvirt) 2023-06-08 13:01:06 -04:00
SECURITY.md Add SECURITY.md 2021-04-20 08:03:18 -04:00
container.fc label kubensenter as well as kubenswrapper 2023-11-14 16:46:02 -05:00
container.if Fix kubernetes transition rule 2023-11-20 08:52:40 -05:00
container.te Merge pull request #286 from rhatdan/kube 2023-11-22 12:36:50 -05:00
container_contexts Add support for running containers within containers 2020-04-15 09:25:16 -04:00
container_selinux.8 Fix spelling mistake in man pages 2023-06-05 15:25:24 -04:00
container_u Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00

README.md

SELinux Policy for Container Runtimes

Blogs on SELinux Policy

Container Labeling
Explains container_t vs container_var_lib_t

container_t versus svirt_lxc_net_t
Clarifys container_t versus svirt_lxc_net_t aliases

SELinux, Podman, and Libvirt
Information regarding SELinux blocking Podman container from talking to Libvirt

Caution Relabeling Volumes with Container Runtimes
Explains effects of relabeling volumes with :Z

Container Domains (Types)
Explanation of SELinux Domain types.

Containers and MLS
Container-selinux policy support of MLS (Multi Level Security).