KubeArmor
KubeArmor copied to clipboard
Support network policy enforcement for SELinux-enabled env
Feature Request
Short Description
The SELinux enforcer currently supports policy enforcements for processes and file accesses. There is a need for network policy enforcement.
The AppArmor enforcer already supports the network policy enforcement; thus, the SELinux enforcer also needs to support the same.
network:
matchProtocols:
- protocol: [tcp|udp|icmp]
fromSource:
- path: [path]
action: [Allow|Audit|Block]