Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add fapolicyd configuration rules #3416

Merged
merged 5 commits into from Oct 18, 2022

Conversation

galal-hussein
Copy link
Contributor

Proposed Changes

  • Added fapolicyd configuration rules on RHEL systems

The install script will check for fapolicy existence and if it exists it will add the file /etc/fapolicyd/rules.d/80-rke2.rules to the rules directory which contains:

allow perm=any all : dir=/var/lib/rancher/
allow perm=any all : dir=/opt/cni/
allow perm=any all : dir=/run/k3s/
allow perm=any all : dir=/var/lib/kubelet/
  • Add uninstall section for fapolicyd configuration rules as well

Types of Changes

bug fix

Verification

On RHEL machine:

  • Install fapolicyd yum install -y fapolicyd
  • Install rke2 using the install script

Linked Issues

@galal-hussein galal-hussein requested a review from a team as a code owner October 3, 2022 22:32
install.sh Outdated Show resolved Hide resolved
install.sh Outdated Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants