Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Metadata extractor for SELinux Labels #362

Open
dstiliadis opened this issue Sep 13, 2017 · 0 comments
Open

Metadata extractor for SELinux Labels #362

dstiliadis opened this issue Sep 13, 2017 · 0 comments

Comments

@dstiliadis
Copy link
Contributor

Requested behavior

The Trireme example can associate with the Trireme identity the SELInux labels of the
process that is being executed. This will help us to define SELinux based network
policies that span hosts, similar to what SELinux was trying to achieve with much
more complex implementations.

Expected behavior

When a process is instantiated through Trireme, the SELinux labels associated with
the process are captured and become part of the identity.

I can then use these SELinux labels to define a policy. For example if a file
has the labels: system_u:object_r:user_a these labels can become part of an authorization
policy.

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

1 participant