mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00

Files

T

Daniel J Walsh cd96170c10 Need to setup labeling of kernel keyrings.

Work is ongoing in the kernel to support different kernel
keyrings per user namespace.  We want to allow SELinux to manage
kernel keyrings inside of the container.

Currently when runc creates the kernel keyring it gets the label which runc is
running with ususally `container_runtime_t`, with this change the kernel keyring
will be labeled with the container process label container_t:s0:C1,c2.

Container running as container_t:s0:c1,c2 can manage keyrings with the same label.

This change required a revendoring or the SELinux go bindings.

github.com/opencontainers/selinux.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

2019-03-13 17:57:30 -04:00

972 B

Raw Blame History

selinux

Common SELinux package used across the container ecosystem.

Please see the godoc for more information.

Code of Conduct

Participation in the OpenContainers community is governed by OpenContainer's Code of Conduct.

Security

If you find an issue, please follow the security protocol to report it.

972 B Raw Blame History

selinux

Code of Conduct

Security

972 B

Raw Blame History