https://github.com/gprocunier/blastwall

SELinux, IdM, and AAP proof of concept for confining privileged automation and denying kernel exploit surfaces before jobs reach managed RHEL hosts.

ansible ansible-automation-platform automation-security bpf-lsm calabi copyfail ebpf eigenstate-ipa exploit-mitigation freeipa idm kernel-security linux-security openshift privileged-automation red-hat rhel security-hardening selinux selinux-policy

Last synced: 30 Jun 2026