summaryrefslogtreecommitdiff
path: root/libpod
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2019-10-30 14:29:54 +0100
committerGitHub <noreply@github.com>2019-10-30 14:29:54 +0100
commit2e8eb8403d4a25bc9c9e60ed28ed09d2fda7a088 (patch)
treeecc0ca29dc13f0e59fbce98f72a191157ce4e333 /libpod
parent7318b0e8c75f50d909f88b9878580fcc53998900 (diff)
parent0b9e07f7f289da6fda83bcb1660e345cf894a6b6 (diff)
downloadpodman-2e8eb8403d4a25bc9c9e60ed28ed09d2fda7a088.tar.gz
podman-2e8eb8403d4a25bc9c9e60ed28ed09d2fda7a088.tar.bz2
podman-2e8eb8403d4a25bc9c9e60ed28ed09d2fda7a088.zip
Merge pull request #4372 from rhatdan/exec
Processes execed into container should match container label
Diffstat (limited to 'libpod')
-rw-r--r--libpod/oci_conmon_linux.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/libpod/oci_conmon_linux.go b/libpod/oci_conmon_linux.go
index 448e05bdf..2798c3043 100644
--- a/libpod/oci_conmon_linux.go
+++ b/libpod/oci_conmon_linux.go
@@ -1023,8 +1023,8 @@ func prepareProcessExec(c *Container, cmd, env []string, tty bool, cwd, user, se
if err != nil {
return nil, err
}
-
pspec := c.config.Spec.Process
+ pspec.SelinuxLabel = c.config.ProcessLabel
pspec.Args = cmd
// We need to default this to false else it will inherit terminal as true
// from the container.