Description
This repository contains a tool for generating SELinux security profiles for containers. The whole concept is based on "block inheritence" feature inside CIL intermediate language supported by SELinux userspace. The tool creates a policy which combines rules inherited from specified CIL blocks(templates) and rules discovered by inspection of container JSON file, which contains mountpoints and ports definitions.
Installation Instructions
# dnf copr enable lvrabec/udica
# dnf install udica -y
Active Releases
The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).
Release | Architectures | Repo Download |
---|---|---|
EPEL 7 | x86_64 (10)* | EPEL 7 (206 downloads) |
EPEL 8 | x86_64 (8)* | EPEL 8 (153 downloads) |
Fedora 38 | i386 (15)*, x86_64 (16)* | Fedora 38 (0 downloads) |
Fedora 39 | i386 (16)*, x86_64 (16)* | Fedora 39 (55 downloads) |
Fedora 40 | i386 (10)*, x86_64 (12)* | Fedora 40 (40 downloads) |
Fedora 41 | i386 (6)*, x86_64 (6)* | Fedora 41 (11 downloads) |
Fedora rawhide | i386 (9)*, x86_64 (12)* | Fedora rawhide (186 downloads) |
* Total number of downloaded packages.
Quick Enable
#> dnf copr enable lvrabec/udica
More info about enabling Copr repositories