From 6fa369bc4d0525ae9bd1433e302197600ed85ff8 Mon Sep 17 00:00:00 2001 From: Jonathon Anderson Date: Mon, 15 Jul 2024 12:17:37 -0600 Subject: [PATCH] Update selinux documentation to reference an example Signed-off-by: Jonathon Anderson --- CHANGELOG.md | 6 ++++++ userdocs/contents/security.rst | 7 +++++-- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 53bca146..37a6e7e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -39,6 +39,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - Replace slice in templates with sprig substr. #1093 - Fix an invalid format issue for the GitHub nightly build action. #1258 +## v4.5.7, unreleased + +### Changed + +- Added a link to an example SELinux-enabled node image in documentation. #1305 + ## v4.5.6, unreleased ### Fixed diff --git a/userdocs/contents/security.rst b/userdocs/contents/security.rst index a53d5dac..7b624f3a 100644 --- a/userdocs/contents/security.rst +++ b/userdocs/contents/security.rst @@ -42,10 +42,13 @@ do have to make some configuration changes. for the provisioning file system. That change is made like: ``$ sudo wwctl profile set --root tmpfs default``. -#. That is all you have to do to ensure that Warewulf will probably +#. That is all you have to do to ensure that Warewulf will support SELinux. Once that is done, you just need to enable SELinux in ``/etc/sysconfig/selinux`` and install the appropriate profiles - into the container. + into the container. `An example`_ of such a container is in the + warewulf-node-images repository. + +.. _An example: https://github.com/warewulf/warewulf-node-images/tree/main/examples/rockylinux-9-selinux Provisioning Security =====================