Replies: 1 comment 7 replies
-
|
@haircommander please see |
Beta Was this translation helpful? Give feedback.
-
|
Also, shall I take it as selinux in enforcing mode on host machine? |
Beta Was this translation helpful? Give feedback.
-
|
yeah it's deprecated because soon we will interpret just the selinux enforcing mode on the host. So yeah set to enforcing on the host machine and |
Beta Was this translation helpful? Give feedback.
-
|
@haircommander selinux=true in /etc/crio/crio.conf |
Beta Was this translation helpful? Give feedback.
-
|
yup correct! |
Beta Was this translation helpful? Give feedback.
-
|
Thank you |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
There are multiple modes in which SELinux can be set. What is the impact of each mode on CRI-O?
Also, what is the idle setting for SELinux for CRI-O?
Different modes of SELinux are:
According to https://www.redhat.com/en/blog/latest-container-exploit-runc-can-be-blocked-selinux document:
SELinux should be enabled in CRI-O to prevent certain vulnerabilities
Beta Was this translation helpful? Give feedback.
All reactions