Docker 0-Day Stopped Cold by SELinux

Re:Docker 0-Day Stopped Cold by SELinux by s_kilk on Saturday January 14, 2017 @10:45AM (#13398873)

The thing that kills it for me is that Fedora ships with broken default configuration.

Install Fedora, reboot and log in. Chances are within minutes you'll start seeing "selinux denied" messages popping up, complaining about services, files and policies you've never heard of. How is anyone but a seasoned RHEL admin supposed to know what to do with that?

[ Parent | on HN ]

Re:Docker 0-Day Stopped Cold by SELinux by cozzyd on Saturday January 14, 2017 @11:27AM (#13399100)

This might have been true many years ago, but it certainly isn't true nowadays (at least... not on the Workstation spin, can't vouch for others).

[ Parent | on HN ]

Re:Docker 0-Day Stopped Cold by SELinux by s_kilk on Saturday January 14, 2017 @11:29AM (#13399108)

I've had it happen to me in the last week, with Fedora 25 Workstation Edition, the latest and greatest.

This seems like a good example of YMMV :)

[ Parent | on HN ]

Re:Docker 0-Day Stopped Cold by SELinux by op00to on Saturday January 14, 2017 @12:38PM (#13399482)

Hope you filed a bug in this instance! Fedora makes this really easy to do.

[ Parent | on HN ]

Re:Docker 0-Day Stopped Cold by SELinux by Gracana on Saturday January 14, 2017 @01:15PM (#13399695)

Sort of. I tried the latest workstation release recently and the installer was broken.. you need a bug tracker account to file a bug, so you need your browser to work, which is rough when your system doesn't.

[ Parent | on HN ]

Re:Docker 0-Day Stopped Cold by SELinux by s_kilk on Saturday January 14, 2017 @01:29PM (#13399767)

I really should have, as I can't remember the specifics now.

I'll try again in a VM and see if I can recreate the issue.

[ Parent | on HN ]