selinux

Documentation

Overview

Package selinux contains security context constraints SELinux strategy implementations.

Index

• type SELinuxSecurityContextConstraintsStrategy
  • func NewMustRunAs(options *api.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)
  • func NewRunAsAny(options *api.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

Types

type SELinuxSecurityContextConstraintsStrategy

type SELinuxSecurityContextConstraintsStrategy interface {
	// Generate creates the SELinuxOptions based on constraint rules.
	Generate(pod *api.Pod, container *api.Container) (*api.SELinuxOptions, error)
	// Validate ensures that the specified values fall within the range of the strategy.
	Validate(pod *api.Pod, container *api.Container) fielderrors.ValidationErrorList
}

SELinuxSecurityContextConstraintsStrategy defines the interface for all SELinux constraint strategies.

func NewMustRunAs

func NewMustRunAs(options *api.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

func NewRunAsAny

func NewRunAsAny(options *api.SELinuxContextStrategyOptions) (SELinuxSecurityContextConstraintsStrategy, error)

NewRunAsAny provides a strategy that will return the configured se linux context or nil.