1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00

Remove MLS example from SELinux example in run reference

Automatic translation of MLS labels is currently not
supported, so should not be documented as an example.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
This commit is contained in:
Sebastiaan van Stijn 2016-05-19 21:06:08 +02:00
parent 0e9009bae3
commit 841cf6fffb
No known key found for this signature in database
GPG key ID: 76698F39D527CE8C

View file

@ -630,15 +630,12 @@ with the same logic -- if the original volume was specified with a name it will
You can override the default labeling scheme for each container by specifying You can override the default labeling scheme for each container by specifying
the `--security-opt` flag. For example, you can specify the MCS/MLS level, a the `--security-opt` flag. Specifying the level in the following command
requirement for MLS systems. Specifying the level in the following command
allows you to share the same content between containers. allows you to share the same content between containers.
$ docker run --security-opt label=level:s0:c100,c200 -it fedora bash $ docker run --security-opt label=level:s0:c100,c200 -it fedora bash
An MLS example might be: > **Note**: Automatic translation of MLS labels is not currently supported.
$ docker run --security-opt label=level:TopSecret -it rhel7 bash
To disable the security labeling for this container versus running with the To disable the security labeling for this container versus running with the
`--permissive` flag, use the following command: `--permissive` flag, use the following command: