mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 14:13:58 +08:00
7f60c92d65
docker exec changes the mount namespace which fools selinux bindings into thinking SELinux is disabled. Bindings should just check if a label is passed in and attempt to use it. Docker will not call these functions with a label if SELinux is disabled. Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)