Merge pull request #6372 from fidencio/wip/seutil-fix-container_kvm_t-type-detection

seutil: Fix setting the "container_kvm_t" label
This commit is contained in:
Derek McGowan
2021-12-15 10:35:04 -08:00
committed by GitHub
2 changed files with 1 additions and 38 deletions

View File

@@ -269,17 +269,10 @@ func modifyProcessLabel(runtimeType string, spec *specs.Spec) error {
if !isVMBasedRuntime(runtimeType) {
return nil
}
l, err := getKVMLabel(spec.Process.SelinuxLabel)
l, err := seutil.ChangeToKVM(spec.Process.SelinuxLabel)
if err != nil {
return errors.Wrap(err, "failed to get selinux kvm label")
}
spec.Process.SelinuxLabel = l
return nil
}
func getKVMLabel(l string) (string, error) {
if !seutil.HasType("container_kvm_t") {
return "", nil
}
return seutil.ChangeToKVM(l)
}