kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

We should always return the MountLabel

Browse source 
We need to have labels applied even if a container is running in privileged
mode.  On an tightly locked down SELinux system, this will cause running
without labels will cause SELinux to block privileged mode containers.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
Dan Walsh 2016-04-30 05:43:07 -04:00
parent 7a56581297
commit 3894773d6e
1 changed files with 0 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
container/container.go
View file

@ -340,9 +340,6 @@ func (container *Container) GetProcessLabel() string {
// GetMountLabel returns the mounting label for the container. // GetMountLabel returns the mounting label for the container.
// This label is empty if the container is privileged. // This label is empty if the container is privileged.
func (container *Container) GetMountLabel() string { func (container *Container) GetMountLabel() string {
if container.HostConfig.Privileged {
return ""
}
return container.MountLabel return container.MountLabel
} }