7.2. Configuring Multi-Category Security for data confidentiality

• OpenShift
• virt
• sandbox
• network labeling
• containers (container-selinux)

Prerequisites

• SELinux mode is set to enforcing.
• The SELinux policy is set to targeted or mls.
• The policycoreutils-python-utils and setools-console packages are installed.

Verification

• For each user domain, display additional details for all the components:

  # seinfo -xt user_t
  
  Types: 1
  type user_t, application_domain_type, nsswitch_domain, corenet_unlabeled_type, domain, kernel_system_state_reader, mcs_constrained_type, netlabel_peer_type, privfd, process_user_target, scsi_generic_read, scsi_generic_write, syslog_client_type, pcmcia_typeattr_1, user_usertype, login_userdomain, userdomain, unpriv_userdomain, userdom_home_reader_type, userdom_filetrans_type, xdmhomewriter, x_userdomain, x_domain, dridomain, xdrawable_type, xcolormap_type;