github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Merge pull request #4699 from dweomer/selinx-relabel-dev-shm

Browse Source 
cri: selinux relabel /dev/shm
This commit is contained in:
Michael Crosby 2020-11-09 12:12:35 -05:00 committed by GitHub
commit 293b08dd19
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/cri/server/container_create_linux.go
View File

@ -99,9 +99,10 @@ func (c *criService) containerMounts(sandboxID string, config *runtime.Container
sandboxDevShm = devShm sandboxDevShm = devShm
} }
mounts = append(mounts, &runtime.Mount{ mounts = append(mounts, &runtime.Mount{
ContainerPath: devShm, ContainerPath: devShm,
HostPath: sandboxDevShm, HostPath: sandboxDevShm,
Readonly: false, Readonly: false,
SelinuxRelabel: true,
}) })
} }
return mounts return mounts