SELinux is disabled for Kolla deployments

Bug #1797277 reported by Taz
292
This bug affects 8 people
Affects Status Importance Assigned to Milestone
kolla-ansible
Confirmed
Undecided
Unassigned

Bug Description

Kolla disables SELinux. This is bad security practice and strongly undesirable for any Enterprise or production implementations of OpenStack.

I'm keen to understand (other than the loose description on the Kolla deployment guide) what the blockers are to getting it enabled and how I can contribute here. Any logs or particular directories & containers that need policies writing would be a big jump

I'm currently working off Kolla-ansible 6.x deploying Queens, likely 7.x when it rolls to gold and Rocky.

Tags: selinux
Taz (tarrant-marshall)
information type: Private Security → Public Security
Tom Fifield (fifieldt)
Changed in kolla-ansible:
status: New → Confirmed
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.