openstack
/
openstack-ansible-security
Code Issues Proposed changes
openstack-ansible-security/doc/source/developer-notes/V-51363.rst

301 B
Raw Blame History

The openstack-ansible project configures AppArmor to limit the actions of containers and reduce the changes (and potential damages) of a container breakout. The RHEL 6 STIG mentions SELinux but the existing SELinux policies provided with Ubuntu aren't as well maintained as those provided with RHEL.