No description
  • Roff 86.1%
  • Makefile 9.7%
  • Shell 4.2%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Daniel J Walsh 7e4149b840
Merge pull request #477 from JMarcosHP/fix-containerd-snapshotter
fix: Add missing contexts for Docker's containerd-snapshotter
2026-07-21 06:35:04 -04:00
.fmf Packit: run Podman SELinux-specific tests on public testing farm 2023-04-03 16:21:45 +05:30
plans Revert "Add XML validation workflow using GitHub Actions" (#464) 2026-05-12 07:05:13 -04:00
rpm rpm: Require policycoreutils >= 3.10 for policydb version 24 support 2026-06-18 14:46:50 -04:00
test TMT: Add job for XML validation 2026-01-07 18:12:45 +05:30
udica-templates Add udica policy templates 2021-09-08 20:33:54 +02:00
.gitignore Additional labeling for ocid 2017-01-06 15:26:49 -05:00
.packit.yaml Packit: no notification on podman-next build failure 2026-01-07 17:19:00 +05:30
CODE-OF-CONDUCT.md Add Code of Conduct 2020-02-08 16:04:25 -05:00
container.fc fix: Add missing contexts for Docker's containerd-snapshotter 2026-07-20 09:20:39 -06:00
container.if Merge pull request #473 from JJanasek/nnp_transition 2026-07-20 07:42:46 -04:00
container.te Bump to v2.250.0 2026-07-02 06:09:09 -04:00
container_contexts Add support for running containers within containers 2020-04-15 09:25:16 -04:00
container_selinux.8 Fix typo in container_selinux(8) man page 2025-12-12 14:07:34 -05:00
container_u Install container_u on confined SELinux user systems 2023-05-10 12:09:50 -04:00
LICENSE Fix license of docker-selinux should be GPLV2 2015-11-30 15:40:44 -05:00
Makefile Makefile: Add validate-xml target 2026-01-07 18:12:45 +05:30
OWNERS OWNERS: add @jankaluza 2026-02-18 14:02:42 -05:00
README.md Fix minor typo in README.md (Libvert -> Libvirt) 2023-06-08 13:01:06 -04:00
SECURITY.md SECURITY.md: Use GitHub Security Advisory for reports (#462) 2026-05-05 07:51:57 -04:00

SELinux Policy for Container Runtimes

Blogs on SELinux Policy

Container Labeling
Explains container_t vs container_var_lib_t

container_t versus svirt_lxc_net_t
Clarifys container_t versus svirt_lxc_net_t aliases

SELinux, Podman, and Libvirt
Information regarding SELinux blocking Podman container from talking to Libvirt

Caution Relabeling Volumes with Container Runtimes
Explains effects of relabeling volumes with :Z

Container Domains (Types)
Explanation of SELinux Domain types.

Containers and MLS
Container-selinux policy support of MLS (Multi Level Security).