KubeArmor icon indicating copy to clipboard operation
KubeArmor copied to clipboard

Configure LSM Order

Open daemon1024 opened this issue 3 years ago • 1 comments

Feature Request

We recently introduced BPF LSM for enforcement and current order for checking the LSM to use for enforcement in KubeArmor is

BPFLSM -> AppArmor -> SELinux

But this order should be configurable

Is your feature request related to a problem? Please describe the use case.

We can have issues with Hybrid Node Setup and might want to have a preference order for the LSMs.

Describe the solution you'd like Add a config flag to KubeArmor to set the preference order

  • [x] Add -lsm to KubeArmor
  • [x] Update codegen
  • [ ] Update Karmor

daemon1024 avatar Jul 28 '22 15:07 daemon1024

Waiting for #898 to be mergedn to update karmor.

achrefbensaad avatar Sep 15 '22 09:09 achrefbensaad