Add Selinux Relabel for volume mounts

containerd · May 19, 2020 · cef52f1 · cef52f1
1 parent 6e20d36
commit cef52f1
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/pkg/server/container_create.go b/pkg/server/container_create.go
@@ -288,10 +288,9 @@ func (c *criService) volumeMounts(containerRootDir string, criMounts []*runtime.
 		src := filepath.Join(containerRootDir, "volumes", volumeID)
 		// addOCIBindMounts will create these volumes.
 		mounts = append(mounts, &runtime.Mount{
-			ContainerPath: dst,
-			HostPath:      src,
-			// Use default mount propagation.
-			// TODO(random-liu): What about selinux relabel?
+			ContainerPath:  dst,
+			HostPath:       src,
+			SelinuxRelabel: true,
 		})
 	}
 	return mounts