Import SElinux module
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 974
- Forks
- 296
- Avg merge
- 6d 14h
- Merged PRs (30d)
- 9
Description
Created originally in Butane by @quentin9696: https://github.com/coreos/butane/issues/477
Feature Request
Environment
I run on AWS but I don't think it matter
Desired Feature
Be able to import custom SELinux module with ignition. This is usually done by running the command semodule -i /path/to/module. Files can be compile module or cil modules
Other Information
This must be done after the filesystem is loaded.
Some OS comes with SElinux enabled by default, I think it would be nice to have more feature related to selinux
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing Ignition's handling of configuration after the filesystem is loaded and the documented semodule -i command behavior. Determine how compiled and CIL SELinux modules would be represented and ordered after filesystem setup. Done means both module types can be imported after the filesystem is available, with coverage for the supported configuration behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100