We should always return the MountLabel

We need to have labels applied even if a container is running in privileged
mode.  On an tightly locked down SELinux system, this will cause running
without labels will cause SELinux to block privileged mode containers.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
Dan Walsh 2016-04-30 05:43:07 -04:00
parent 7a56581297
commit 3894773d6e
1 changed files with 0 additions and 3 deletions

View File

@ -340,9 +340,6 @@ func (container *Container) GetProcessLabel() string {
// GetMountLabel returns the mounting label for the container.
// This label is empty if the container is privileged.
func (container *Container) GetMountLabel() string {
if container.HostConfig.Privileged {
return ""
}
return container.MountLabel
}