a841e184de
This patch updates the documentation for the developer notes associated with the Cat 2 (Medium) controls applied by the security role. Partial-bug: 1583744 Change-Id: Ic342f33942521db009185585a21208a4688f6ed3
8 lines
380 B
ReStructuredText
8 lines
380 B
ReStructuredText
For Ubuntu, the standard AppArmor policies provided by the AppArmor package are
|
|
loaded. The OpenStack-Ansible project also configures AppArmor to limit the
|
|
actions of containers and reduce the changes (and potential damages) of a
|
|
container breakout.
|
|
|
|
On CentOS 7, the ``selinux-policy-targeted`` package provides SELinux policies
|
|
that enforce limits on system services and users.
|