SELinux disabled on pcluster ami buildtime
Open
3.x
Question
Security
- Dominant language
- Python
- Stars
- 888
- Forks
- 314
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 43
Description
SELinux is required to operate within various compliance landscapes.
P Cluster's AMI creation disables and checks that SELinux is disabled.
https://github.com/aws/aws-parallelcluster-cookbook/blob/develop/cookbooks/aws-parallelcluster-platform/test/controls/disable_selinux_spec.rb
https://aws.amazon.com/blogs/hpc/securing-hpc-on-aws-implementing-stigs-in-aws-parallelcluster/ Suggests that it is possible to operate P Cluster in a compliant environment, with SELinux (as implied by the STIGs).
Is there a reason why SELinux is disabled?
Contributor guide
Assessment
This issue has not been assessed yet.