Home

Welcome to the custodia-selinux wiki!

Custodia server

• config /etc/custodia/
• logs /var/log/custodia/
• var dir /var/lib/custodia/
• bind to Unix stream socket /var/run/custodia.sock
• bind to any TCP socket
• connect to any TCP socket
• fork
• read /proc/pid/cgroup
• read /proc/pid/loginuid
• units /usr/lib/systemd/system/custodia.service, /usr/lib/systemd/system/custodia.socket

clients

• allow any program to connect to Custodia's sockets (TCP, Unix)