Files
linuxkit/projects/selinux
Justin Cormack 57c75741e9 Revert Command->Args but remove from yaml where not needed
In the riddler change I changed "command" in the yaml to "args"
but did not change the files. In fact we basically used the
default command everywhere so this did not actually break.

Remove the unnecessary "command" lines to simplify yaml.

Revert the command to args change for now as I think I prefer
command, but its easier to switch now. Need to think if the
entrypoint/command distinction matters before finalizing.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-04 09:51:17 +01:00
..
2017-03-21 11:42:11 -06:00
2017-03-27 09:53:26 +02:00
2017-03-21 12:08:14 -06:00

selinux

The ultimate goal here is to use SELinux as our default LSM in Moby. To this end, here are the compiler flags and userspace packages necessary to do the basics.

TODO

All the necessary binaries exist, so the next steps are:

  • label the filesystem with a default label
  • have a policy that contains containerd
  • label each container's files seprately, and contain them each with a policy
  • policies for other system daemons