Does selinux work with kernel namespaces?

2018-02-07 Thread Matt Callaway
Hello, I am attempting to run Docker on CentOS 7.4 with selinux and kernel namespaces enabled. When I do so I observe an error that leads me to an issue filed in github and a kernel patch that suggests that the cause should be fixed in kernel 4.11+. Yet I cannot run docker containers in this fashi

Re: Does selinux work with kernel namespaces?

2018-02-09 Thread Matt Callaway
I joined the selinux list and sent the above, but I have not seen it posted. I rebuilt my test system with stock centos 7.4 with the docker that it comes with and the kernel that it comes with. It runs fine before enabling userns-remap: [root@localhost ~]# uname -r 3.10.0-693.17.1.el7.x86_64 [roo

Re: Does selinux work with kernel namespaces?

2018-02-09 Thread Matt Callaway
running exec setns process for init caused \"exit status 40\"": unknown. So maybe this just doesn't work yet. On Fri, Feb 9, 2018 at 7:19 PM, Matt Callaway wrote: > I joined the selinux list and sent the above, but I have not seen it posted. > > I rebuilt my test s

Re: Does selinux work with kernel namespaces?

2018-02-11 Thread Matt Callaway
It should work with SELinux at that time. > > >> On 02/09/2018 08:50 PM, Matt Callaway wrote: >> Then updating to docker-ce again via the docker instructions: >> >> https://docs.docker.com/install/linux/docker-ce/centos/#set-up-the-repository >> >>