Jacob Blain Christen a1e7dd939d cri: selinuxrelabel=false for /dev/shm w/ host ipc ...

This is a followup to #4699 that addresses an oversight that could cause
the CRI to relabel the host /dev/shm, which should be a no-op in most
cases. Additionally, fixes unit tests to make correct assertions for
/dev/shm relabeling.

Discovered while applying the changes for #4699 to containerd/cri 1.4:
https://github.com/containerd/cri/pull/1605

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>

2020-11-11 15:22:17 -07:00

..

atomic

use containerd/project header test

2020-04-22 19:35:37 -05:00

cri

cri: selinuxrelabel=false for /dev/shm w/ host ipc

2020-11-11 15:22:17 -07:00

dialer

Unify dialer implementations

2020-02-26 23:29:04 +02:00

ioutil

use containerd/project header test

2020-04-22 19:35:37 -05:00

netns

replace pkg/symlink with moby/sys/symlink

2020-10-30 00:05:15 +01:00

oom

cgroup2: implement containerd.events.TaskOOM event

2020-06-01 14:00:13 +09:00

os

replace pkg/symlink with moby/sys/symlink

2020-10-30 00:05:15 +01:00

process

Add logging binary support when terminal is true

2020-08-25 17:28:29 -07:00

progress

Fix linter errors

2019-07-14 20:49:40 -07:00

registrar

use containerd/project header test

2020-04-22 19:35:37 -05:00

seccomp

remove libseccomp cgo dependency

2020-07-30 18:51:23 +09:00

seed

Seed random on ctr and containerd startup

2018-07-12 17:51:55 -07:00

seutil

Handle KVM based runtimes with selinux

2020-08-26 21:38:03 -04:00

stdio

Add logging binary support when terminal is true

2020-08-25 17:28:29 -07:00

testutil

vendor: update gotest.tools v3.0.2

2020-02-28 17:47:20 +01:00

timeout

Allow timeouts to be configured in config

2019-08-13 17:36:32 +00:00

ttrpcutil

fix dial error when clean up a dead shim

2020-03-12 10:57:55 +08:00