Daniel J Walsh 7c6034e161 We need to change the SELinux label of the conmon process to s0 ...

If SELinux is enabled, we are leaking in pipes into the container
owned by conmon.  The container processes are not allowed to use
these pipes, if the calling process is fully ranged.  By changing
the level of the conmon process to s0, this allows container processes
to use the pipes.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

Closes: #854
Approved by: mheon

2018-05-31 13:51:11 +00:00

..

common

Change un/pwd handling to match Buildah's

2018-02-06 09:29:23 -05:00

driver

Migrate Create|Commit to ginkgo

2018-02-02 22:44:40 +00:00

image

save and load should support multi-tag for docker-archive

2018-05-25 15:15:47 +00:00

layers

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

testdata

Add hooks support to podman

2018-04-05 14:13:49 +00:00

boltdb_state_internal.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

boltdb_state.go

Add per-pod CGroups

2018-05-17 23:10:12 +00:00

common_test.go

Add pod state

2018-05-17 23:10:12 +00:00

container_api.go

Optionally init() during container restart

2018-05-04 10:57:50 +00:00

container_attach.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

container_commit.go

Make references to the Process part of Spec conditional

2018-05-25 15:32:47 +00:00

container_graph_test.go

Fix tests

2018-03-29 02:18:45 +00:00

container_graph.go

Remove a loop in container graph

2018-03-29 02:18:45 +00:00

container_inspect.go

Make references to the Process part of Spec conditional

2018-05-25 15:32:47 +00:00

container_internal.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

container_top.go

Major fixes to systemd cgroup handling

2018-05-11 14:43:57 +00:00

container.go

Place Conmon and Container in separate CGroups

2018-05-11 14:43:57 +00:00

diff.go

Stage 4 Image cleanup

2018-03-23 15:35:37 +00:00

errors.go

Add schema validation to DB

2017-11-30 18:05:56 +00:00

finished_32.go

Make libpod build on 32-bit systems

2018-02-13 15:39:07 +00:00

finished_64.go

Make libpod build on 32-bit systems

2018-02-13 15:39:07 +00:00

in_memory_state.go

Add pod state

2018-05-17 23:10:12 +00:00

info.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

networking.go

networking, userNS: configure the network namespace after create

2018-05-04 17:15:55 +00:00

oci.go

We need to change the SELinux label of the conmon process to s0

2018-05-31 13:51:11 +00:00

options.go

Add per-pod CGroups

2018-05-17 23:10:12 +00:00

pod.go

Add per-pod CGroups

2018-05-17 23:10:12 +00:00

runtime_ctr.go

Add per-pod CGroups

2018-05-17 23:10:12 +00:00

runtime_img_test.go

regression: tls verify should be set on registries.conf if insecure

2018-04-18 14:07:59 +00:00

runtime_img.go

Use buildah commit and bud in podman

2018-04-27 20:51:07 +00:00

runtime_pod.go

Add per-pod CGroups

2018-05-17 23:10:12 +00:00

runtime.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

state_test.go

Add pod state

2018-05-17 23:10:12 +00:00

state.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

stats.go

Major fixes to systemd cgroup handling

2018-05-11 14:43:57 +00:00

storage.go

Begin wiring in USERNS Support into podman

2018-05-04 17:15:55 +00:00

util_test.go

Stage3 Image Library

2018-03-14 20:21:31 +00:00

util.go

Stage 4 Image cleanup

2018-03-23 15:35:37 +00:00

version.go

varlink images

2018-04-26 19:14:44 +00:00