SELinux policy for a service that runs `podman build`
Open
- Dominant language
- Python
- Stars
- 583
- Forks
- 48
- PR merge metrics
- No merged PRs in 30d
Description
It is possible to write an SELinux policy for a systemd service that runs `podman build`?
I have tried various approaches, including `udica`, but `podman build` consistently hangs.
https://github.com/containers/podman/discussions/27874
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the reported hang in a systemd service running `podman build`, then read the linked Podman discussion and review the attempted `udica` approaches described there. Done means determining whether a workable SELinux policy can be generated for this service without the build hanging.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100