Daniel J Walsh 31a7299a25 If caller specifies label overrides, don't override security options ...

If a caller specifies an SELinux type or MCS Label and still wants to
share an IPC Namespace or the host namespace, we should allow them.
Currently we are ignoring the label specification if ipcmod=container
or pidmode=host.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Upstream-commit: 881e20ee0be4bf048fb3b7e7f4c12b076a1607bb
Component: engine

2017-03-16 20:33:37 -04:00

..

engine

If caller specifies label overrides, don't override security options

2017-03-16 20:33:37 -04:00