bottlerocket-os / bottlerocket-os/bottlerocket-core-kit
Support labeling files on the root partition other than `os_t`. e.g., `local_t`, `cache_t`.
Open
enhancement
- Dominant language
- Rust
- Stars
- 34
- Forks
- 77
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 23
Description
**What I'd like:**
Have some defined path(s) on the root partition to use a label other than `os_t`. For example, label `/usr/cache-t/*` as `cache-t`, label `/usr/local-t/*` as `local-t`.
Why I want this feature?
I need to store some read-only files on the root partition. But those files are data files, say a db file. Or binaries that not supposed to executed by host or kernel. So `os_t` doesn't fit.
**Any alternatives you've considered:**
Contributor guide
Assessment
This issue has not been assessed yet.