vbatts/cri-o
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Default type for containers is not container_t

Browse source 
We usually specify MCS Labels as comma separated pair.
Finally if we run two different containers we want them on different
MCS labels.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh 2017-01-20 15:39:26 -05:00
parent 7fda27a5b3
commit 9c61688098
2 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
test/testdata/container_config.json vendored
View file

@ -66,8 +66,8 @@
"selinux_options": {
"user": "system_u",
"role": "system_r",
"type": "svirt_lxc_net_t",
"level": "s0:c4-c5"
"type": "container_t",
"level": "s0:c4,c5"
},
"user": {
"uid": 5,