Merge pull request #4699 from dweomer/selinx-relabel-dev-shm

cri: selinux relabel /dev/shm
2020-11-09 12:12:35 -05:00 · 2020-11-09 12:12:35 -05:00 · 293b08dd19
commit 293b08dd19
parent ac61e58cdd e8d8ae3b97
1 changed files with 4 additions and 3 deletions
--- a/pkg/cri/server/container_create_linux.go
+++ b/pkg/cri/server/container_create_linux.go
@ -99,9 +99,10 @@ func (c *criService) containerMounts(sandboxID string, config *runtime.Container
 			sandboxDevShm = devShm
 		}
 		mounts = append(mounts, &runtime.Mount{
-			ContainerPath: devShm,
-			HostPath:      sandboxDevShm,
-			Readonly:      false,
+			ContainerPath:  devShm,
+			HostPath:       sandboxDevShm,
+			Readonly:       false,
+			SelinuxRelabel: true,
 		})
 	}
 	return mounts