Daniel J Walsh d2ea9cc2fa We need to release the SELinux label when we destroy the sandbox ... This will release the MCS Label to be used again. Only do this if we don't have another sandbox using the same label. Also vendor in the latest selinux go bindings, which fixes a leak and properly reserves the SELinux label we are going to use. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>		2017-10-24 19:30:57 -07:00
..
go-digest
image-spec
runc	add kpod stats function	2017-08-17 11:34:10 -04:00
runtime-spec
runtime-tools	container_create: handle cap add/drop ALL	2017-09-07 16:43:33 +02:00
selinux	We need to release the SELinux label when we destroy the sandbox	2017-10-24 19:30:57 -07:00