vbatts/pkg
1
0
Fork 0
Code Pull requests Releases Activity

Ensure that selinux is disabled by default

Browse source 
This also includes some portability changes so that the package can be
imported with the top level runtime.
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
This commit is contained in:
Michael Crosby 2014-04-07 14:43:50 -07:00
parent 08ed0c8761
commit bcd17c6fdc
4 changed files with 15 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

5
selinux/selinux_test.go
View file

@ -12,9 +12,7 @@ func testSetfilecon(t *testing.T) {
out, _ := os.OpenFile(tmp, os.O_WRONLY, 0)
out.Close()
err := selinux.Setfilecon(tmp, "system_u:object_r:bin_t:s0")
if err == nil {
t.Log(selinux.Getfilecon(tmp))
} else {
if err != nil {
t.Log("Setfilecon failed")
t.Fatal(err)
}
@ -41,7 +39,6 @@ func TestSELinux(t *testing.T) {
pid := os.Getpid()
t.Log("PID:%d MCS:%s\n", pid, selinux.IntToMcs(pid, 1023))
t.Log(selinux.Getcon())
t.Log(selinux.Getfilecon("/etc/passwd"))
err = selinux.Setfscreatecon("unconfined_u:unconfined_r:unconfined_t:s0")
if err == nil {
t.Log(selinux.Getfscreatecon())