Skip to content
This repository has been archived by the owner on Oct 10, 2020. It is now read-only.

syscontainers: correctly setup the rootfs SELinux label #1185

Commits on Feb 14, 2018

  1. syscontainers: correctly setup the rootfs SELinux label

    The files inside the container are labelled by Skopeo when the image is
    pulled to the OSTree storage.
    
    Instead the root directory is created by atomic and by default it gets
    the label "unconfined_u:object_r:container_share_t:s0".
    
    Make sure we label the rootfs with the same label of '/'.
    
    We have changed the way files are labelled by Skopeo but we forgot to
    change the label for the rootfs created by atomic.  This patch ensures
    the SELinux label for the rootfs is set.
    
    Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1544175
    
    Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
    giuseppe committed Feb 14, 2018
    Configuration menu
    Copy the full SHA
    4ea5d5a View commit details
    Browse the repository at this point in the history