Merge pull request #4699 from dweomer/selinx-relabel-dev-shm

cri: selinux relabel /dev/shm
2020-11-09 12:12:35 -05:00
parent ac61e58cdd e8d8ae3b97
commit 293b08dd19
1 changed files with 4 additions and 3 deletions
--- a/pkg/cri/server/container_create_linux.go
+++ b/pkg/cri/server/container_create_linux.go
@@ -102,6 +102,7 @@ func (c *criService) containerMounts(sandboxID string, config *runtime.Container
 			ContainerPath:  devShm,
 			HostPath:       sandboxDevShm,
 			Readonly:       false,
+			SelinuxRelabel: true,
 		})
 	}
 	return mounts