External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-01-08 05:55:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't mount selinux fs in LXC if selinux is disabled

Browse Source 
Before trying to mount the selinux filesystem in a container
use is_selinux_enabled() to check if the machine actually
has selinux support (eg not booted with selinux=0)

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
(cherry picked from commit 95c6cc344b)
This commit is contained in:
Daniel P. Berrange 2013-05-15 16:26:59 +01:00 committed by Jim Fehlig
parent 269dfa0e08
commit 647156870e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/lxc/lxc_container.c
View File

@ -705,6 +705,12 @@ static int lxcContainerMountBasicFS(bool pivotRoot,
(access(srcpath, R_OK) < 0)) (access(srcpath, R_OK) < 0))
continue; continue;
#if WITH_SELINUX
if (STREQ(mnts[i].src, SELINUX_MOUNT) &&
!is_selinux_enabled())
continue;
#endif
if (virFileMakePath(mnts[i].dst) < 0) { if (virFileMakePath(mnts[i].dst) < 0) {
virReportSystemError(errno, virReportSystemError(errno,
_("Failed to mkdir %s"), _("Failed to mkdir %s"),