Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

restrict bootstrap container user data #1496

Merged

Conversation

bcressey
Copy link
Contributor

Issue number:
N/A

Description of changes:
This is a follow-up ea35f1b, which added similar restrictions to host container user data.

Testing done:
Confirmed that a bootstrap container's user data had the expected label:

# ls -latrZ /local/bootstrap-containers/boot-label/user-data
-rw-r--r--. 1 root root system_u:object_r:secret_t:s0 11 Apr 16 18:36 /local/bootstrap-containers/boot-label/user-data

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

This is a follow-up to ea35f1b, which added similar restrictions for
host container user data.

Signed-off-by: Ben Cressey <[email protected]>
@bcressey bcressey force-pushed the restrict-bootstrap-user-data branch from 62d3a2b to f976318 Compare April 16, 2021 22:33
@bcressey bcressey merged commit 6a1a9c0 into bottlerocket-os:develop Apr 20, 2021
@bcressey bcressey deleted the restrict-bootstrap-user-data branch April 20, 2021 00:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants