Code

fix various SELinux policy issues#1729

Code

Merged

bcressey merged 8 commits intobottlerocket-os:developbottlerocket-os/bottlerocket:developfrom bcressey:policy-fixesbcressey/bottlerocket:policy-fixesCopy head branch name to clipboardSep 9, 2021

+71-48

Commits

Commits on Sep 2, 2021

• selinux-policy: add proc type

  Show description for e029c1d
  bcressey

  committed
  e029c1d

  Copy full SHA for e029c1d

• selinux-policy: drop external and unlabeled types

  Show description for 7534d22
  bcressey

  committed
  7534d22

  Copy full SHA for 7534d22

• release: drop context mount options for /local

  Show description for eddc9a4
  bcressey

  committed
  eddc9a4

  Copy full SHA for eddc9a4

• release: restrict writes to /usr/src/kernels

  Show description for 1533cde
  bcressey

  committed
  1533cde

  Copy full SHA for 1533cde

• selinux-policy: add distinct type for container files

  Show description for d2a2b5d
  bcressey

  committed
  d2a2b5d

  Copy full SHA for d2a2b5d

• selinux-policy: use target's range for new files

  Show description for b126b1c
  bcressey

  committed
  b126b1c

  Copy full SHA for b126b1c

• selinux-policy: set range for privileged containers

  Show description for bb14322
  bcressey

  committed
  bb14322

  Copy full SHA for bb14322

• host-ctr: label containers with all categories

  Show description for fa78efd
  bcressey

  committed
  fa78efd

  Copy full SHA for fa78efd