For those not following the container world SELinux just proved it merits

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: selinux@xxxxxxxxxxxxxxx
Subject: For those not following the container world SELinux just proved it merits
From: Daniel Walsh <dwalsh@xxxxxxxxxx>
Date: Fri, 15 Feb 2019 13:45:06 -0500
Openpgp: preference=signencrypt
Organization: Red Hat
Reply-to: dwalsh@xxxxxxxxxx
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1

Protecting against a major CVE against all containers that we not
running with SELinux


https://blog.openshift.com/openshift-protects-against-nasty-container-exploit/

Prev by Date: Re: [RFC PATCH 22/27] KEYS: Replace uid/gid/perm permissions checking with an ACL
Next by Date: Re: [PATCH v3] scripts/selinux: add basic mls support to mdp
Previous by thread: Re: [RFC PATCH 22/27] KEYS: Replace uid/gid/perm permissions checking with an ACL
Next by thread: Re: [PATCH v2] LSM: Ignore "security=" when "lsm=" is specified
Index(es):
- Date
- Thread

[Index of Archives] [Selinux Refpolicy] [Linux SGX] [Fedora Users] [Fedora Desktop] [Yosemite Photos] [Yosemite Camping] [Yosemite Campsites] [KDE Users] [Gnome Users]

Powered by Linux