mirror of https://gitee.com/openkylin/libvirt.git
Don't mount selinux fs in LXC if selinux is disabled
Before trying to mount the selinux filesystem in a container use is_selinux_enabled() to check if the machine actually has selinux support (eg not booted with selinux=0) Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
This commit is contained in:
parent
ba5f3c7c8e
commit
95c6cc344b
|
@ -702,6 +702,12 @@ static int lxcContainerMountBasicFS(char *sec_mount_options)
|
||||||
(access(srcpath, R_OK) < 0))
|
(access(srcpath, R_OK) < 0))
|
||||||
continue;
|
continue;
|
||||||
|
|
||||||
|
#if WITH_SELINUX
|
||||||
|
if (STREQ(mnts[i].src, SELINUX_MOUNT) &&
|
||||||
|
!is_selinux_enabled())
|
||||||
|
continue;
|
||||||
|
#endif
|
||||||
|
|
||||||
if (virFileMakePath(mnts[i].dst) < 0) {
|
if (virFileMakePath(mnts[i].dst) < 0) {
|
||||||
virReportSystemError(errno,
|
virReportSystemError(errno,
|
||||||
_("Failed to mkdir %s"),
|
_("Failed to mkdir %s"),
|
||||||
|
|
Loading…
Reference in New Issue