#1038164 RFP: container-selinux -- SELinux policy module for containers

Package:
wnpp
Source:
wnpp
Submitter:
Sam Morris
Date:
2025-09-03 08:51:01 UTC
Severity:
normal
#1038164#5
Date:
2023-06-16 09:10:02 UTC
From:
To:
  Package name    : container-selinux
  URL             : https://github.com/containers/container-selinux
  License         : GPL
  Description     : SELinux policy confinement of containers

This package is needed for podman/buildah to work on systems where
SELinux is running.

Unless it's installed, the user has to manally disable container
labelling in containers.conf, or disable SELinux.

<https://github.com/containers/podman/issues/14376#issuecomment-1591125253>
-----BEGIN PGP SIGNATURE-----

iIgEARYIADAWIQTWOGqGn6HETecdzqZOEaKLhlAYigUCZIwm4xIcc2FtQHJvYm90
cy5vcmcudWsACgkQThGii4ZQGIoKPgD+OHE7MjhotfAhTnNkM74pZGPzke033Rxb
OynaiRzwQ9gA/0imgNQhyIcaY5nfECbpiy4HiT5nZXVSkW2grAxCFsEG
=B1D/
-----END PGP SIGNATURE-----
#1038164#14
Date:
2025-09-03 08:38:41 UTC
From:
To:
close 1038164
thanks

The Trixie policy has the container module which covers most of this.  There
are some things like container_runtime_exec_t, that aren't included, it would
be good to get them upstream.  Currently the policy in Trixie is the upstream
container policy.