Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update selinux.md to add a note on a possible required reboot for CentOS/RHEL systems #232

Merged
merged 2 commits into from
Jul 15, 2024
Merged

Update selinux.md to add a note on a possible required reboot for CentOS/RHEL systems #232

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c81b0b5
Update selinux.md to add a note on a possible required reboot for Cen…
pdiaz-suse Jul 1, 2024
0621a69
Update docs/security/selinux.md
dereknola Jul 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/security/selinux.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ The [policy](https://github.com/rancher/rke2-selinux) supporting this is a speci
[container-selinux](https://github.com/containers/container-selinux) policy for containerd. It accounts
for the non-standard location(s) which containerd is installed and places persistent and ephemeral state.

Note: In some circumstances, a reboot of the node may be required after installing the rke2-selinux package and before starting the rke2 service. If you encounter denials in your selinux audit log despite installation of the rke2-selinux and container-selinux packages, please reboot the node.

#### Custom Context Labels

RKE2 runs control-plane services as static pods which require access to multiple
Expand Down