<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hey all,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
With <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736" title="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736">
CVE-2019-5736</a> dropping today, I thought it would be a good opportunity to poke about the current state of SELinux support in Kolla. The
<a href="https://docs.openstack.org/kolla-ansible/rocky/user/security.html" title="https://docs.openstack.org/kolla-ansible/rocky/user/security.html">
docs</a> have said it is a work in progress since the Mitaka release at least. I did find a
<a href="https://blueprints.launchpad.net/kolla/+spec/enable-selinux" title="https://blueprints.launchpad.net/kolla/+spec/enable-selinux">
spec</a> that was marked as completed, but I am not aware that there is yet any support and I see that the baremetal role still forces SELinux to "permissive" by default.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Is anybody currently working on this or is there an update spec/blueprint to track the development here? I am no SELinux expert by any means but this feels like an important thing to address, particularly if
<a href="https://docs.docker.com/storage/bind-mounts/#configure-the-selinux-label" title="https://docs.docker.com/storage/bind-mounts/#configure-the-selinux-label">
Docker has made it easier to label bind mounts</a>.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks!<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><span style="background-color:white"><font size="1" face="Helvetica"><span style="font-size:12px; background-color:white; font-weight:normal; text-transform:none"><font size="2" face="Calibri,Helvetica,sans-serif"><span dir="ltr" id="divtagdefaultwrapper" style="font-size:10pt"><font size="3"><span id="divtagdefaultwrapper" style="font-size:12pt"></span></font></span></font></span></font></span></p>
<font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:10pt"><br>
</span></font></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:12pt">Jason Anderson</span></font></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:12pt"></span></font></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3"></font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:10pt"><br>
</span></font></div>
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:10pt">Cloud Computing Software Developer</span></font></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3"></font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:9pt"><b><span id="ms-rterangepaste-start"></span><span class="st">Consortium for Advanced Science and Engineering</span><span id="ms-rterangepaste-end"></span>, The University
of Chicago</b></span></font></div>
</font></font></font><font size="1" face="Helvetica"><font size="2" face="Calibri,Helvetica,sans-serif"><font size="3">
<div style="margin-top:0; margin-bottom:0"><font size="2"><span style="font-size:9pt"><b>Mathematics & Computer Science Division, Argonne National Laboratory</b></span></font></div>
</font></font></font><br>
<p style="margin-top: 0px; margin-bottom: 0px;"></p>
</div>
</div>
</body>
</html>