Antonio Murdaca 75acc7c7c3 libcontainer: selinux: fix DupSecOpt and DisableSecOpt ...

`label.InitLabels` takes options as a string slice in the form of:

    user:system_u
    role:system_r
    type:container_t
    level:s0:c4,c5

However, `DupSecOpt` and `DisableSecOpt` were still adding a docker
specifc `label=` in front of every option. That leads to `InitLabels`
not being able to correctly init selinux labels in this scenario for
instance:

    label.InitLabels(DupSecOpt([%OPTIONS%]))

if `%OPTIONS` has options prefixed with `label=`, that's going to fail.
Fix this by removing that docker specific `label=` prefix.

Signed-off-by: Antonio Murdaca <runcom@redhat.com>

2017-02-06 17:29:42 +01:00

..

selinux_test.go

Add label.GetFileLabel interface

2016-04-08 13:10:37 -04:00

selinux.go

libcontainer: selinux: fix DupSecOpt and DisableSecOpt

2017-02-06 17:29:42 +01:00