mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
4bd4d462af
- Check if Selinux is enabled before relabeling. This is a bug. - Make exclusion detection constant time. Kinda buggy too, imo. - Do not depend on a magic string to create a new Selinux context. Signed-off-by: David Calavera <david.calavera@gmail.com>
72 lines
1.5 KiB
Go
72 lines
1.5 KiB
Go
// +build !selinux !linux
|
|
|
|
package label
|
|
|
|
// InitLabels returns the process label and file labels to be used within
|
|
// the container. A list of options can be passed into this function to alter
|
|
// the labels.
|
|
func InitLabels(options []string) (string, string, error) {
|
|
return "", "", nil
|
|
}
|
|
|
|
func GenLabels(options string) (string, string, error) {
|
|
return "", "", nil
|
|
}
|
|
|
|
func FormatMountLabel(src string, mountLabel string) string {
|
|
return src
|
|
}
|
|
|
|
func SetProcessLabel(processLabel string) error {
|
|
return nil
|
|
}
|
|
|
|
func SetFileLabel(path string, fileLabel string) error {
|
|
return nil
|
|
}
|
|
|
|
func SetFileCreateLabel(fileLabel string) error {
|
|
return nil
|
|
}
|
|
|
|
func Relabel(path string, fileLabel string, shared bool) error {
|
|
return nil
|
|
}
|
|
|
|
func GetPidLabel(pid int) (string, error) {
|
|
return "", nil
|
|
}
|
|
|
|
func Init() {
|
|
}
|
|
|
|
func ReserveLabel(label string) error {
|
|
return nil
|
|
}
|
|
|
|
func UnreserveLabel(label string) error {
|
|
return nil
|
|
}
|
|
|
|
// DupSecOpt takes an process label and returns security options that
|
|
// can be used to set duplicate labels on future container processes
|
|
func DupSecOpt(src string) []string {
|
|
return nil
|
|
}
|
|
|
|
// DisableSecOpt returns a security opt that can disable labeling
|
|
// support for future container processes
|
|
func DisableSecOpt() []string {
|
|
return nil
|
|
}
|
|
|
|
// Validate checks that the label does not include unexpected options
|
|
func Validate(label string) error {
|
|
return nil
|
|
}
|
|
|
|
// IsShared checks that the label includes a "shared" mark
|
|
func IsShared(label string) bool {
|
|
return false
|
|
}
|