From 647156870e59fa334deb6b3601f2aff62b0f5d20 Mon Sep 17 00:00:00 2001 From: "Daniel P. Berrange" Date: Wed, 15 May 2013 16:26:59 +0100 Subject: [PATCH] Don't mount selinux fs in LXC if selinux is disabled Before trying to mount the selinux filesystem in a container use is_selinux_enabled() to check if the machine actually has selinux support (eg not booted with selinux=0) Signed-off-by: Daniel P. Berrange (cherry picked from commit 95c6cc344bec8405636d2a59fc0c34e0581001ab) --- src/lxc/lxc_container.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/lxc/lxc_container.c b/src/lxc/lxc_container.c index 86746df5fa..c9c11e8575 100644 --- a/src/lxc/lxc_container.c +++ b/src/lxc/lxc_container.c @@ -705,6 +705,12 @@ static int lxcContainerMountBasicFS(bool pivotRoot, (access(srcpath, R_OK) < 0)) continue; +#if WITH_SELINUX + if (STREQ(mnts[i].src, SELINUX_MOUNT) && + !is_selinux_enabled()) + continue; +#endif + if (virFileMakePath(mnts[i].dst) < 0) { virReportSystemError(errno, _("Failed to mkdir %s"), -- GitLab