Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

tetragon: log current security context if any at startup #2149

Merged
merged 2 commits into from
Mar 28, 2024
Merged

tetragon: log current security context if any at startup #2149

merged 2 commits into from
Mar 28, 2024

Conversation

tixxdz
Copy link
Member

@tixxdz tixxdz commented Feb 26, 2024

closes: #360

@tixxdz tixxdz requested a review from a team as a code owner February 26, 2024 10:33
@tixxdz tixxdz requested a review from kkourt February 26, 2024 10:33
@tixxdz tixxdz added the release-note/minor This PR introduces a minor user-visible change label Feb 26, 2024
@netlify Netlify
Copy link

netlify bot commented Feb 26, 2024 •
edited
Loading

✅ Deploy Preview for tetragon ready!

Name Link
🔨 Latest commit 5576702
🔍 Latest deploy log https://app.netlify.com/sites/tetragon/deploys/660548cdea178d0008bd04df
😎 Deploy Preview https://deploy-preview-2149--tetragon.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@tixxdz tixxdz requested a review from tpapagian February 26, 2024 10:34
@tixxdz tixxdz mentioned this pull request Feb 26, 2024
Closed
kkourt
kkourt approved these changes Feb 29, 2024
View reviewed changes
@tpapagian tpapagian added the needs-rebase This PR needs to be rebased because it has merge conflicts. label Mar 8, 2024
@tixxdz
tetragon: log current security context if any at startup
89d1a84 
Signed-off-by: Djalal Harouni <tixxdz@gmail.com>
@tixxdz tixxdz force-pushed the pr/tixxdz/log-security-lsm-context branch from 6e369c9 to 5576702 Compare March 28, 2024 10:39
@tixxdz tixxdz removed the needs-rebase This PR needs to be rebased because it has merge conflicts. label Mar 28, 2024
@tixxdz
Copy link
Member Author

tixxdz commented Mar 28, 2024

Added lockdown context on top, as Tetragon was failing for some users running in confidentiality mode that blocks kprobes.

@kkourt kkourt mentioned this pull request Mar 28, 2024
Closed
@tixxdz
tetragon: log current lockdown security context
7ff027e 
level=info msg="Tetragon current security context" AppArmor=unconfined Lockdown=none SELinux=unconfined Smack=

Signed-off-by: Djalal Harouni <tixxdz@gmail.com>
@tixxdz tixxdz force-pushed the pr/tixxdz/log-security-lsm-context branch from 5576702 to 7ff027e Compare March 28, 2024 11:16
@tixxdz tixxdz mentioned this pull request Mar 28, 2024
Open
mtardy
mtardy approved these changes Mar 28, 2024
View reviewed changes
Copy link
Member

@mtardy mtardy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks that's great!

@tixxdz tixxdz merged commit 31a0f3a into main Mar 28, 2024
33 checks passed
@tixxdz tixxdz deleted the pr/tixxdz/log-security-lsm-context branch March 28, 2024 12:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kkourt kkourt kkourt approved these changes

@tpapagian tpapagian tpapagian approved these changes

@mtardy mtardy mtardy approved these changes

@olsajiri olsajiri olsajiri approved these changes

Assignees
No one assigned
Labels
release-note/minor This PR introduces a minor user-visible change
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

tetragon: print current main tetragon security context from /proc/self/attr
5 participants
@tixxdz @kkourt @tpapagian @mtardy @olsajiri