Dan Walsh 73617e5e18 Change default label of container volumes to shared SELinux Label ... Since these will be shared between containers we want to label them as svirt_sandbox_file_t:s0. That will allow multiple containers to write to them. Currently we are allowing container domains to read/write all content in /var/lib/docker because of container volumes. This is a big security hole in our SELinux story. This patch will allow us to tighten up the security of docker containers. Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)		2014-09-09 08:18:20 -04:00
..
driver.go	Change default label of container volumes to shared SELinux Label	2014-09-09 08:18:20 -04:00
vfs_test.go	update go import path and libcontainer	2014-07-24 22:19:50 +00:00