HCL-TECH-SOFTWARE / connections-automation

Deployment and upgrade automation scripts for HCL Connections 7.0 based on Ansible
Apache License 2.0
17 stars 31 forks source link

SELinux rules #185

Open stoeps13 opened 2 years ago

stoeps13 commented 2 years ago

Hi again, on all Red Hat servers the SELinux is disabled after running the playbook connections-setup-complete.yml, but I see tons of SELinux rules added during the installation. So why are these rules added, when SELinux is disabled everywhere?

On the other side SElinux is the best prevention for container escapes, so at a minimum SELinux should be activated latest after the installation.

Regards Christoph

sabrina-yee commented 2 years ago

Adding a ticket to the internal backlog to prioritize and investigate.