27 lines
722 B
Go
27 lines
722 B
Go
|
// +build linux
|
||
|
|
|
||
|
|
package lib
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/kubernetes-incubator/cri-o/lib/sandbox"
|
||
|
|
selinux "github.com/opencontainers/selinux/go-selinux"
|
||
|
|
"github.com/opencontainers/selinux/go-selinux/label"
|
||
|
|
)
|
||
|
|
|
||
|
|
func (c *ContainerServer) addSandboxPlatform(sb *sandbox.Sandbox) {
|
||
|
|
c.state.processLevels[selinux.NewContext(sb.ProcessLabel())["level"]]++
|
||
|
|
}
|
||
|
|
|
||
|
|
func (c *ContainerServer) removeSandboxPlatform(sb *sandbox.Sandbox) {
|
||
|
|
processLabel := sb.ProcessLabel()
|
||
|
|
level := selinux.NewContext(processLabel)["level"]
|
||
|
|
pl, ok := c.state.processLevels[level]
|
||
|
|
if ok {
|
||
|
|
c.state.processLevels[level] = pl - 1
|
||
|
|
if c.state.processLevels[level] == 0 {
|
||
|
|
label.ReleaseLabel(processLabel)
|
||
|
|
delete(c.state.processLevels, level)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|