Files
linuxkit/projects/selinux
Sebastiaan van Stijn 4e1c91fc6e Update ASCII whale
The logo changed, and no longer has waves,
so removing them from the ASCII whale as well

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-06-20 23:22:23 -07:00
..
2017-06-20 23:22:23 -07:00
2017-03-27 09:53:26 +02:00
2017-03-21 12:08:14 -06:00
2017-05-26 13:55:06 +01:00

selinux

The ultimate goal here is to use SELinux as our default LSM in Moby. To this end, here are the compiler flags and userspace packages necessary to do the basics.

TODO

All the necessary binaries exist, so the next steps are:

  • label the filesystem with a default label
  • have a policy that contains containerd
  • label each container's files seprately, and contain them each with a policy
  • policies for other system daemons