summaryrefslogtreecommitdiff
path: root/cmd
diff options
context:
space:
mode:
authorDaniel J Walsh <dwalsh@redhat.com>2018-10-01 18:31:40 -0400
committerDaniel J Walsh <dwalsh@redhat.com>2018-10-02 03:44:46 -0400
commit86d435f32fc4230481d789499973c07a5b5ae78d (patch)
treec2c8e102052f4866180632d0be2b44c2d99da3a7 /cmd
parent3bdccd8a461217ac6d0094c2081f50612d60c19a (diff)
downloadpodman-86d435f32fc4230481d789499973c07a5b5ae78d.tar.gz
podman-86d435f32fc4230481d789499973c07a5b5ae78d.tar.bz2
podman-86d435f32fc4230481d789499973c07a5b5ae78d.zip
Disable SELinux labeling if --privileged
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'cmd')
-rw-r--r--cmd/podman/create.go4
1 files changed, 3 insertions, 1 deletions
diff --git a/cmd/podman/create.go b/cmd/podman/create.go
index fc0c71536..574137271 100644
--- a/cmd/podman/create.go
+++ b/cmd/podman/create.go
@@ -784,7 +784,9 @@ func parseCreateOpts(ctx context.Context, c *cli.Context, runtime *libpod.Runtim
VolumesFrom: c.StringSlice("volumes-from"),
}
- if !config.Privileged {
+ if config.Privileged {
+ config.LabelOpts = label.DisableSecOpt()
+ } else {
if err := parseSecurityOpt(config, c.StringSlice("security-opt")); err != nil {
return nil, err
}