search

google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
https://nsjail.dev
Apache License 2.0
2.92k stars 273 forks source link

selinux support #32

Open farconada opened 7 years ago

farconada commented 7 years ago

How to launch a process with a custom selinux label?

robertswiecki commented 7 years ago

Hi,

nsjail doesn't currently support selinux features, I think we could add them (meaning: will accept PR:), if somebody manages to write smth useful :)