提交 64715687 编写于 作者: D Daniel P. Berrange 提交者: Jim Fehlig

Don't mount selinux fs in LXC if selinux is disabled

Before trying to mount the selinux filesystem in a container
use is_selinux_enabled() to check if the machine actually
has selinux support (eg not booted with selinux=0)
Signed-off-by: NDaniel P. Berrange <berrange@redhat.com>
(cherry picked from commit 95c6cc34)
上级 269dfa0e
......@@ -705,6 +705,12 @@ static int lxcContainerMountBasicFS(bool pivotRoot,
(access(srcpath, R_OK) < 0))
continue;
#if WITH_SELINUX
if (STREQ(mnts[i].src, SELINUX_MOUNT) &&
!is_selinux_enabled())
continue;
#endif
if (virFileMakePath(mnts[i].dst) < 0) {
virReportSystemError(errno,
_("Failed to mkdir %s"),
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册