KubeArmor icon indicating copy to clipboard operation
KubeArmor copied to clipboard

Support network policy enforcement for SELinux-enabled env

Open nam-jaehyun opened this issue 2 years ago • 0 comments

Feature Request

Short Description

The SELinux enforcer currently supports policy enforcements for processes and file accesses. There is a need for network policy enforcement.

The AppArmor enforcer already supports the network policy enforcement; thus, the SELinux enforcer also needs to support the same.

  network:
    matchProtocols:
    - protocol: [tcp|udp|icmp]
      fromSource:
      - path: [path]
  action: [Allow|Audit|Block]

nam-jaehyun avatar Apr 27 '22 11:04 nam-jaehyun