Hi,
we, as Foreman/Satellite folks, have been asked for a SELinux policy for yggdrasil[1]. Do you have any plans around this? From the discussion in the linked bugzilla it seems the ask is not to be super strict, but to not have yggdrasil run as unconfined.
[1] - https://bugzilla.redhat.com/show_bug.cgi?id=2188335