Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move container SELinux policy #6

Closed
mrunalp opened this issue Mar 3, 2017 · 10 comments
Closed

Move container SELinux policy #6

mrunalp opened this issue Mar 3, 2017 · 10 comments

Comments

@mrunalp
Copy link
Contributor

mrunalp commented Mar 3, 2017

@rhatdan @runcom We can move the SELinux policy for containers to this repo for a one stop for all things SELinux for containers.

@rhatdan
Copy link
Collaborator

rhatdan commented Mar 3, 2017

Any chance we could rename the repo to be just selinux and not go-selinux and then make go-selinux a directory? Seems weird to put container-selinux policy inside of a go-selinux repo.

selinux/policy
selinux/golang

Or something like that?

@mrunalp
Copy link
Contributor Author

mrunalp commented Mar 3, 2017 via email

@caniszczyk
Copy link
Contributor

if the @opencontainers/go-selinux-maintainers agree I'm fine doing this

@runcom
Copy link
Member

runcom commented Mar 3, 2017

👍

@caniszczyk
Copy link
Contributor

final call @opencontainers/go-selinux-maintainers on the project rename, if there are no issues I'm fine doing the rename

@mrunalp
Copy link
Contributor Author

mrunalp commented Mar 9, 2017

@caniszczyk Yeah, let's rename it.

@caniszczyk
Copy link
Contributor

@mrunalp renamed

@mrunalp
Copy link
Contributor Author

mrunalp commented Mar 9, 2017

@caniszczyk Thanks!

wking added a commit to wking/oci-project-template that referenced this issue Mar 16, 2017
This project was initially approved as go-selinux [1] but has since
renamed itself to drop the go- prefix [2].

[1]: https://groups.google.com/a/opencontainers.org/forum/#!topic/tob/nH8QU6UnrqA
     Subject: VOTE Required: approve new project go-selinux
     Date: Fri, 17 Feb 2017 01:21:37 +0000
     Message-ID: <CAD2oYtPzgJKeiKKxFnds-yH+2OG3WF6d36gR1uD2Y3+QQdsgpw@mail.gmail.com>
[2]: opencontainers/selinux#6 (comment)

Signed-off-by: W. Trevor King <wking@tremily.us>
wking added a commit to wking/oci-project-template that referenced this issue Mar 17, 2017
This project was initially approved as go-selinux [1] but has since
renamed itself to drop the go- prefix [2].

[1]: https://groups.google.com/a/opencontainers.org/forum/#!topic/tob/nH8QU6UnrqA
     Subject: VOTE Required: approve new project go-selinux
     Date: Fri, 17 Feb 2017 01:21:37 +0000
     Message-ID: <CAD2oYtPzgJKeiKKxFnds-yH+2OG3WF6d36gR1uD2Y3+QQdsgpw@mail.gmail.com>
[2]: opencontainers/selinux#6 (comment)

Signed-off-by: W. Trevor King <wking@tremily.us>
wking added a commit to wking/oci-project-template that referenced this issue Mar 17, 2017
This project was initially approved as go-selinux [1] but has since
renamed itself to drop the go- prefix [2].

[1]: https://groups.google.com/a/opencontainers.org/forum/#!topic/tob/nH8QU6UnrqA
     Subject: VOTE Required: approve new project go-selinux
     Date: Fri, 17 Feb 2017 01:21:37 +0000
     Message-ID: <CAD2oYtPzgJKeiKKxFnds-yH+2OG3WF6d36gR1uD2Y3+QQdsgpw@mail.gmail.com>
[2]: opencontainers/selinux#6 (comment)

Signed-off-by: W. Trevor King <wking@tremily.us>
wking added a commit to wking/oci-project-template that referenced this issue Mar 17, 2017
This project was initially approved as go-selinux [1] but has since
renamed itself to drop the go- prefix [2].

[1]: https://groups.google.com/a/opencontainers.org/forum/#!topic/tob/nH8QU6UnrqA
     Subject: VOTE Required: approve new project go-selinux
     Date: Fri, 17 Feb 2017 01:21:37 +0000
     Message-ID: <CAD2oYtPzgJKeiKKxFnds-yH+2OG3WF6d36gR1uD2Y3+QQdsgpw@mail.gmail.com>
[2]: opencontainers/selinux#6 (comment)

Signed-off-by: W. Trevor King <wking@tremily.us>
wking added a commit to wking/oci-project-template that referenced this issue Mar 17, 2017
This project was initially approved as go-selinux [1] but has since
renamed itself to drop the go- prefix [2].

[1]: https://groups.google.com/a/opencontainers.org/forum/#!topic/tob/nH8QU6UnrqA
     Subject: VOTE Required: approve new project go-selinux
     Date: Fri, 17 Feb 2017 01:21:37 +0000
     Message-ID: <CAD2oYtPzgJKeiKKxFnds-yH+2OG3WF6d36gR1uD2Y3+QQdsgpw@mail.gmail.com>
[2]: opencontainers/selinux#6 (comment)

Signed-off-by: W. Trevor King <wking@tremily.us>
wking added a commit to wking/oci-project-template that referenced this issue Mar 17, 2017
Catching up with opencontainers/tob@0057edc (Merge pull request opencontainers#29
from opencontainers/selinux-project, 2017-02-23) and the subsequent
rename [1].

I'd still rather drop the parenthetical entirely and link to a place
that listed OCI Projects, but we don't have a canonical target for
that yet (opencontainers/tob#2) and the current closest instance seems
to be the GitHub section in [2] (which doesn't have the "OCI Project"
words).

[1]: opencontainers/selinux#6 (comment)
[2]: https://www.opencontainers.org/community

Signed-off-by: W. Trevor King <wking@tremily.us>
@cpuguy83
Copy link
Contributor

Wouldn't the selinux policy greatly depend on the base policy which may (or rather, does AFAICT) between distros?

@rhatdan
Copy link
Collaborator

rhatdan commented Feb 20, 2020

The answer is yes, well somewhat anyways.

@rhatdan rhatdan closed this as completed Feb 20, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants