mirror of https://gitee.com/openkylin/libvirt.git
Don't mount selinux fs in LXC if selinux is disabled
Before trying to mount the selinux filesystem in a container use is_selinux_enabled() to check if the machine actually has selinux support (eg not booted with selinux=0) Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
This commit is contained in:
parent
ba5f3c7c8e
commit
95c6cc344b
|
@ -702,6 +702,12 @@ static int lxcContainerMountBasicFS(char *sec_mount_options)
|
|||
(access(srcpath, R_OK) < 0))
|
||||
continue;
|
||||
|
||||
#if WITH_SELINUX
|
||||
if (STREQ(mnts[i].src, SELINUX_MOUNT) &&
|
||||
!is_selinux_enabled())
|
||||
continue;
|
||||
#endif
|
||||
|
||||
if (virFileMakePath(mnts[i].dst) < 0) {
|
||||
virReportSystemError(errno,
|
||||
_("Failed to mkdir %s"),
|
||||
|
|
Loading…
Reference in New Issue