-
Notifications
You must be signed in to change notification settings - Fork 3
Closed
Description
Acceptance criteria:
- AppArmor profile from devstack is applied to stage k8s node
- SRE will actually apply the profile: https://2u-internal.atlassian.net/browse/GSRE-2699
- PRs to get this file into the right repo first: feat: Move codejail apparmor profile to public-dockerfiles devstack#117 and Add apparmor profile for codejail-service public-dockerfiles#106
- Ensure we have a ticket for finding a long-term approach to where the profile will be managed and maintained and how it will be deployed: https://2u-internal.atlassian.net/browse/GSRE-2701
- Django setting
CODEJAIL_ENABLEDset to True in stage, andCODE_JAILvalues configured - Test procedure that was developed in Create codejail functionality and security test script #896 passes to our satisfaction, from a security and basic functionality perspective (OK to have some non-security bugs)
Reactions are currently unavailable