Description
This repository contains a tool for generating SELinux security profiles for containers. The whole concept is based on "block inheritence" feature inside CIL intermediate language supported by SELinux userspace. The tool creates a policy which combines rules inherited from specified CIL blocks(templates) and rules discovered by inspection of container JSON file, which contains mountpoints and ports definitions.
Installation Instructions
# dnf copr enable lvrabec/udica
# dnf install udica -y
Active Releases
The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).
Release | Architectures | Repo Download |
---|---|---|
EPEL 7 | x86_64 (2)* | EPEL 7 (181 downloads) |
EPEL 8 | x86_64 (0)* | EPEL 8 (119 downloads) |
Fedora 37 | i386 (8)*, x86_64 (9)* | Fedora 37 (0 downloads) |
Fedora 38 | i386 (7)*, x86_64 (8)* | Fedora 38 (15 downloads) |
Fedora 39 | i386 (6)*, x86_64 (8)* | Fedora 39 (21 downloads) |
Fedora 40 | i386 (2)*, x86_64 (2)* | Fedora 40 (2 downloads) |
Fedora rawhide | i386 (1)*, x86_64 (4)* | Fedora rawhide (158 downloads) |
* Total number of downloaded packages.
Quick Enable
#> dnf copr enable lvrabec/udica
More info about enabling Copr repositories