{"action":"created","comment":{"url":"https://api.github.com/repos/coreos/docs/pulls/comments/39704521","id":39704521,"diff_hunk":"@@ -0,0 +1,39 @@\n+# Using SELinux on CoreOS\n+\n+SELinux is a fine-grained access control mechanism that is integrated into\n+CoreOS and rkt. Each container is run in its own independent SELinux\n+context, increasing isolation between containers even in the event of a\n+container being compromised. CoreOS implements SELinux, but currently does\n+not enforce SELinux protections by default.\n+\n+## Determining whether containers are compatible with SELinux policy\n+\n+To verify whether the current SELinux policy would inhibit your containers,\n+enable SELinux logging by running the following commands as root:\n+* rm /etc/audit/rules.d/80-selinux.rules\n+* rm /etc/audit/rules.d/99-default.rules","path":"os/selinux.md","position":14,"original_position":14,"commit_id":"bbc3db641540ce0b8fa02524cd795ac8db1fb919","original_commit_id":"bbc3db641540ce0b8fa02524cd795ac8db1fb919","user":{"login":"marineam","id":153640,"avatar_url":"https://avatars.githubusercontent.com/u/153640?v=3","gravatar_id":"","url":"https://api.github.com/users/marineam","html_url":"https://github.com/marineam","followers_url":"https://api.github.com/users/marineam/followers","following_url":"https://api.github.com/users/marineam/following{/other_user}","gists_url":"https://api.github.com/users/marineam/gists{/gist_id}","starred_url":"https://api.github.com/users/marineam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marineam/subscriptions","organizations_url":"https://api.github.com/users/marineam/orgs","repos_url":"https://api.github.com/users/marineam/repos","events_url":"https://api.github.com/users/marineam/events{/privacy}","received_events_url":"https://api.github.com/users/marineam/received_events","type":"User","site_admin":false},"body":"Hm, the intent was to default to only logging SELinux stuff but I must have screwed up the rule somehow. We can document this as a work-around for now but we should get the rules fixed in next week's alpha.","created_at":"2015-09-17T01:33:56Z","updated_at":"2015-09-17T01:33:56Z","html_url":"https://github.com/coreos/docs/pull/588#discussion_r39704521","pull_request_url":"https://api.github.com/repos/coreos/docs/pulls/588","_links":{"self":{"href":"https://api.github.com/repos/coreos/docs/pulls/comments/39704521"},"html":{"href":"https://github.com/coreos/docs/pull/588#discussion_r39704521"},"pull_request":{"href":"https://api.github.com/repos/coreos/docs/pulls/588"}}},"pull_request":{"url":"https://api.github.com/repos/coreos/docs/pulls/588","id":45241290,"html_url":"https://github.com/coreos/docs/pull/588","diff_url":"https://github.com/coreos/docs/pull/588.diff","patch_url":"https://github.com/coreos/docs/pull/588.patch","issue_url":"https://api.github.com/repos/coreos/docs/issues/588","number":588,"state":"open","locked":false,"title":"Add SELinux documentation","user":{"login":"mjg59","id":1420843,"avatar_url":"https://avatars.githubusercontent.com/u/1420843?v=3","gravatar_id":"","url":"https://api.github.com/users/mjg59","html_url":"https://github.com/mjg59","followers_url":"https://api.github.com/users/mjg59/followers","following_url":"https://api.github.com/users/mjg59/following{/other_user}","gists_url":"https://api.github.com/users/mjg59/gists{/gist_id}","starred_url":"https://api.github.com/users/mjg59/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjg59/subscriptions","organizations_url":"https://api.github.com/users/mjg59/orgs","repos_url":"https://api.github.com/users/mjg59/repos","events_url":"https://api.github.com/users/mjg59/events{/privacy}","received_events_url":"https://api.github.com/users/mjg59/received_events","type":"User","site_admin":false},"body":"","created_at":"2015-09-17T00:50:30Z","updated_at":"2015-09-17T01:33:56Z","closed_at":null,"merged_at":null,"merge_commit_sha":"e85712f205d21659db7d38fa2b9e97eb3ec8a2c0","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/coreos/docs/pulls/588/commits","review_comments_url":"https://api.github.com/repos/coreos/docs/pulls/588/comments","review_comment_url":"https://api.github.com/repos/coreos/docs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/coreos/docs/issues/588/comments","statuses_url":"https://api.github.com/repos/coreos/docs/statuses/bbc3db641540ce0b8fa02524cd795ac8db1fb919","head":{"label":"mjg59:master","ref":"master","sha":"bbc3db641540ce0b8fa02524cd795ac8db1fb919","user":{"login":"mjg59","id":1420843,"avatar_url":"https://avatars.githubusercontent.com/u/1420843?v=3","gravatar_id":"","url":"https://api.github.com/users/mjg59","html_url":"https://github.com/mjg59","followers_url":"https://api.github.com/users/mjg59/followers","following_url":"https://api.github.com/users/mjg59/following{/other_user}","gists_url":"https://api.github.com/users/mjg59/gists{/gist_id}","starred_url":"https://api.github.com/users/mjg59/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjg59/subscriptions","organizations_url":"https://api.github.com/users/mjg59/orgs","repos_url":"https://api.github.com/users/mjg59/repos","events_url":"https://api.github.com/users/mjg59/events{/privacy}","received_events_url":"https://api.github.com/users/mjg59/received_events","type":"User","site_admin":false},"repo":{"id":42623131,"name":"docs","full_name":"mjg59/docs","owner":{"login":"mjg59","id":1420843,"avatar_url":"https://avatars.githubusercontent.com/u/1420843?v=3","gravatar_id":"","url":"https://api.github.com/users/mjg59","html_url":"https://github.com/mjg59","followers_url":"https://api.github.com/users/mjg59/followers","following_url":"https://api.github.com/users/mjg59/following{/other_user}","gists_url":"https://api.github.com/users/mjg59/gists{/gist_id}","starred_url":"https://api.github.com/users/mjg59/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjg59/subscriptions","organizations_url":"https://api.github.com/users/mjg59/orgs","repos_url":"https://api.github.com/users/mjg59/repos","events_url":"https://api.github.com/users/mjg59/events{/privacy}","received_events_url":"https://api.github.com/users/mjg59/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/mjg59/docs","description":"Documentation for CoreOS in markdown","fork":true,"url":"https://api.github.com/repos/mjg59/docs","forks_url":"https://api.github.com/repos/mjg59/docs/forks","keys_url":"https://api.github.com/repos/mjg59/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mjg59/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mjg59/docs/teams","hooks_url":"https://api.github.com/repos/mjg59/docs/hooks","issue_events_url":"https://api.github.com/repos/mjg59/docs/issues/events{/number}","events_url":"https://api.github.com/repos/mjg59/docs/events","assignees_url":"https://api.github.com/repos/mjg59/docs/assignees{/user}","branches_url":"https://api.github.com/repos/mjg59/docs/branches{/branch}","tags_url":"https://api.github.com/repos/mjg59/docs/tags","blobs_url":"https://api.github.com/repos/mjg59/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mjg59/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mjg59/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/mjg59/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mjg59/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/mjg59/docs/languages","stargazers_url":"https://api.github.com/repos/mjg59/docs/stargazers","contributors_url":"https://api.github.com/repos/mjg59/docs/contributors","subscribers_url":"https://api.github.com/repos/mjg59/docs/subscribers","subscription_url":"https://api.github.com/repos/mjg59/docs/subscription","commits_url":"https://api.github.com/repos/mjg59/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/mjg59/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/mjg59/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/mjg59/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/mjg59/docs/contents/{+path}","compare_url":"https://api.github.com/repos/mjg59/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mjg59/docs/merges","archive_url":"https://api.github.com/repos/mjg59/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mjg59/docs/downloads","issues_url":"https://api.github.com/repos/mjg59/docs/issues{/number}","pulls_url":"https://api.github.com/repos/mjg59/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/mjg59/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/mjg59/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mjg59/docs/labels{/name}","releases_url":"https://api.github.com/repos/mjg59/docs/releases{/id}","created_at":"2015-09-17T00:48:56Z","updated_at":"2015-09-17T00:48:57Z","pushed_at":"2015-09-17T00:49:35Z","git_url":"git://github.com/mjg59/docs.git","ssh_url":"git@github.com:mjg59/docs.git","clone_url":"https://github.com/mjg59/docs.git","svn_url":"https://github.com/mjg59/docs","homepage":"http://coreos.com/docs","size":7646,"stargazers_count":0,"watchers_count":0,"language":"Shell","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"coreos:master","ref":"master","sha":"b04262dd5b3cdc79de35dd18864d7c3ce79faa60","user":{"login":"coreos","id":3730757,"avatar_url":"https://avatars.githubusercontent.com/u/3730757?v=3","gravatar_id":"","url":"https://api.github.com/users/coreos","html_url":"https://github.com/coreos","followers_url":"https://api.github.com/users/coreos/followers","following_url":"https://api.github.com/users/coreos/following{/other_user}","gists_url":"https://api.github.com/users/coreos/gists{/gist_id}","starred_url":"https://api.github.com/users/coreos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coreos/subscriptions","organizations_url":"https://api.github.com/users/coreos/orgs","repos_url":"https://api.github.com/users/coreos/repos","events_url":"https://api.github.com/users/coreos/events{/privacy}","received_events_url":"https://api.github.com/users/coreos/received_events","type":"Organization","site_admin":false},"repo":{"id":11597120,"name":"docs","full_name":"coreos/docs","owner":{"login":"coreos","id":3730757,"avatar_url":"https://avatars.githubusercontent.com/u/3730757?v=3","gravatar_id":"","url":"https://api.github.com/users/coreos","html_url":"https://github.com/coreos","followers_url":"https://api.github.com/users/coreos/followers","following_url":"https://api.github.com/users/coreos/following{/other_user}","gists_url":"https://api.github.com/users/coreos/gists{/gist_id}","starred_url":"https://api.github.com/users/coreos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coreos/subscriptions","organizations_url":"https://api.github.com/users/coreos/orgs","repos_url":"https://api.github.com/users/coreos/repos","events_url":"https://api.github.com/users/coreos/events{/privacy}","received_events_url":"https://api.github.com/users/coreos/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/coreos/docs","description":"Documentation for CoreOS in markdown","fork":false,"url":"https://api.github.com/repos/coreos/docs","forks_url":"https://api.github.com/repos/coreos/docs/forks","keys_url":"https://api.github.com/repos/coreos/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/coreos/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/coreos/docs/teams","hooks_url":"https://api.github.com/repos/coreos/docs/hooks","issue_events_url":"https://api.github.com/repos/coreos/docs/issues/events{/number}","events_url":"https://api.github.com/repos/coreos/docs/events","assignees_url":"https://api.github.com/repos/coreos/docs/assignees{/user}","branches_url":"https://api.github.com/repos/coreos/docs/branches{/branch}","tags_url":"https://api.github.com/repos/coreos/docs/tags","blobs_url":"https://api.github.com/repos/coreos/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/coreos/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/coreos/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/coreos/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/coreos/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/coreos/docs/languages","stargazers_url":"https://api.github.com/repos/coreos/docs/stargazers","contributors_url":"https://api.github.com/repos/coreos/docs/contributors","subscribers_url":"https://api.github.com/repos/coreos/docs/subscribers","subscription_url":"https://api.github.com/repos/coreos/docs/subscription","commits_url":"https://api.github.com/repos/coreos/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/coreos/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/coreos/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/coreos/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/coreos/docs/contents/{+path}","compare_url":"https://api.github.com/repos/coreos/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/coreos/docs/merges","archive_url":"https://api.github.com/repos/coreos/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/coreos/docs/downloads","issues_url":"https://api.github.com/repos/coreos/docs/issues{/number}","pulls_url":"https://api.github.com/repos/coreos/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/coreos/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/coreos/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/coreos/docs/labels{/name}","releases_url":"https://api.github.com/repos/coreos/docs/releases{/id}","created_at":"2013-07-23T02:02:24Z","updated_at":"2015-09-17T00:26:12Z","pushed_at":"2015-09-17T00:50:30Z","git_url":"git://github.com/coreos/docs.git","ssh_url":"git@github.com:coreos/docs.git","clone_url":"https://github.com/coreos/docs.git","svn_url":"https://github.com/coreos/docs","homepage":"http://coreos.com/docs","size":7646,"stargazers_count":585,"watchers_count":585,"language":"Shell","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":336,"mirror_url":null,"open_issues_count":42,"forks":336,"open_issues":42,"watchers":585,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/coreos/docs/pulls/588"},"html":{"href":"https://github.com/coreos/docs/pull/588"},"issue":{"href":"https://api.github.com/repos/coreos/docs/issues/588"},"comments":{"href":"https://api.github.com/repos/coreos/docs/issues/588/comments"},"review_comments":{"href":"https://api.github.com/repos/coreos/docs/pulls/588/comments"},"review_comment":{"href":"https://api.github.com/repos/coreos/docs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/coreos/docs/pulls/588/commits"},"statuses":{"href":"https://api.github.com/repos/coreos/docs/statuses/bbc3db641540ce0b8fa02524cd795ac8db1fb919"}}}}