openstack/ansible-hardening
Code Issues Proposed changes
24f3f73717
ansible-hardening/doc/source/developer-notes/V-51369.rst
Matt Thompson e44efd0fe7 Doc updates 
This commit fixes some RST-related errors, spelling/typos, and updates
some variable values which are incorrect.

Change-Id: Ibc78dffc6246f8df2c0d5d42ca2d831c4c335720
2016-04-15 10:39:21 +00:00

381 B
Raw Blame History

Although SELinux is available on Ubuntu 14.04, the policies aren't maintained as well as they are on Red Hat-based systems. The openstack-ansible project has chosen to use the more Ubuntu-compatible Linux security module, AppArmor.

AppArmor roles are configured in openstack-ansible to limit the chances of container breakout and the potential damage done in case it does occur.