mirror of https://github.com/linuxkit/linuxkit.git synced 2025-10-07 20:35:32 +00:00

Files

Justin Cormack eb22d6909f system → onboot daemon → services

As suggested by @shykes these are clearer

- onboot for things that are run at boot time to completion
- services for persistent services

Signed-off-by: Justin Cormack <justin.cormack@docker.com>

2017-04-08 16:56:47 +01:00

init

selinux: include libselinux-utils as well

2017-03-21 12:11:00 -06:00

kernel

projects: add selinux project

2017-03-21 11:42:11 -06:00

Makefile

Rename .yaml to .yml

2017-03-27 09:53:26 +02:00

README.md

selinux: add readme

2017-03-21 12:08:14 -06:00

selinux.yml

system → onboot daemon → services

2017-04-08 16:56:47 +01:00

README.md

selinux

The ultimate goal here is to use SELinux as our default LSM in Moby. To this end, here are the compiler flags and userspace packages necessary to do the basics.

TODO

All the necessary binaries exist, so the next steps are:

label the filesystem with a default label
have a policy that contains containerd
label each container's files seprately, and contain them each with a policy
policies for other system daemons