google / google/hashr

Add SELinux policy

Open
#50 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
131
Forks
9
PR merge metrics
No merged PRs in 30d

Description

If one tries to run hashr using Linux with enforced SELinux, there will be an access violation when it comes to the preprocessing.
This is due to incompatibility in SELinux contexts of /tmp and docker

AVC Events:
scontext=system_u:system_r:container_t:
tcontext=unconfined_u:object_r:user_tmp_t

General solutions (maybe there are more):
1. Custom SELinux policy
2. Change default preprocessing directory or provide flag to do so
3. Disable SELinux: Don't think this should be a general solution

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.