github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-11-04 00:05:25 +00:00
Code Issues Projects Releases Wiki Activity

selinux: add readme

Browse Source 
Signed-off-by: Tycho Andersen <tycho@docker.com>
This commit is contained in:
Tycho Andersen
2017-03-21 12:08:14 -06:00
parent a8bab0bddb
commit ae423e428b
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
projects/selinux/README.md Normal file
View File

@@ -0,0 +1,14 @@
# selinux
The ultimate goal here is to use SELinux as our default LSM in Moby. To this
end, here are the compiler flags and userspace packages necessary to do the
basics.
# TODO
All the necessary binaries exist, so the next steps are:
* label the filesystem with a default label
* have a policy that contains containerd
* label each container's files seprately, and contain them each with a policy
* policies for other system daemons