Merge pull request #32529 from runcom/relabel-secrets

daemon: relabel secrets path Upstream-commit: 2aec48f44843016d13dfe4b5f53d29d0226fc769 Component: engine
2017-04-12 08:30:30 -04:00
parent 7b2c24fd0f 218a4e5c97
commit 4d6ef8b711
1 changed files with 2 additions and 0 deletions
@@ -214,6 +214,8 @@ func (daemon *Daemon) setupSecretDir(c *container.Container) (setupErr error) {
 		}
 	}

+	label.Relabel(localMountPath, c.MountLabel, false)
+
 	// remount secrets ro
 	if err := mount.Mount("tmpfs", localMountPath, "tmpfs", "remount,ro,"+tmpfsOwnership); err != nil {
 		return errors.Wrap(err, "unable to remount secret dir as readonly")