From 3894773d6edf8127ddf5f811492a9b49673196e7 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Sat, 30 Apr 2016 05:43:07 -0400 Subject: [PATCH] We should always return the MountLabel We need to have labels applied even if a container is running in privileged mode. On an tightly locked down SELinux system, this will cause running without labels will cause SELinux to block privileged mode containers. Signed-off-by: Dan Walsh --- container/container.go | 3 --- 1 file changed, 3 deletions(-) diff --git a/container/container.go b/container/container.go index e7bb9cfa56..42fdfd0a1b 100644 --- a/container/container.go +++ b/container/container.go @@ -340,9 +340,6 @@ func (container *Container) GetProcessLabel() string { // GetMountLabel returns the mounting label for the container. // This label is empty if the container is privileged. func (container *Container) GetMountLabel() string { - if container.HostConfig.Privileged { - return "" - } return container.MountLabel }