Dustin C. Hatch
e9b21b0ca0
We're going to want the ability for processes to have unique categories, to enforce separation of container processes. Gentoo's SELinux policy supports both Multi-Category Security and Multi-Level Security modes, although the latter does not seem to work out of the box.
16 lines
627 B
Plaintext
16 lines
627 B
Plaintext
# This file controls the state of SELinux on the system on boot.
|
|
|
|
# SELINUX can take one of these three values:
|
|
# enforcing - SELinux security policy is enforced.
|
|
# permissive - SELinux prints warnings instead of enforcing.
|
|
# disabled - No SELinux policy is loaded.
|
|
SELINUX=enforcing
|
|
|
|
# SELINUXTYPE can take one of these four values:
|
|
# targeted - Only targeted network daemons are protected.
|
|
# strict - Full SELinux protection.
|
|
# mls - Full SELinux protection with Multi-Level Security
|
|
# mcs - Full SELinux protection with Multi-Category Security
|
|
# (mls, but only one sensitivity level)
|
|
SELINUXTYPE=mcs
|