diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2020-04-17 14:16:28 -0400 |
|---|---|---|
| committer | Daniel J Walsh <dwalsh@redhat.com> | 2020-04-20 15:50:46 -0400 |
| commit | eb101936e6ab21009b130a9e3ddfa939f416ca40 (patch) | |
| tree | 1adf4fadc679747575983c67e275853a42607ba9 /pkg/specgen/generate/container.go | |
| parent | a2ad5bb9e1541707af39a19ec18997f6f0d77a0e (diff) | |
| download | podman-eb101936e6ab21009b130a9e3ddfa939f416ca40.tar.gz podman-eb101936e6ab21009b130a9e3ddfa939f416ca40.tar.bz2 podman-eb101936e6ab21009b130a9e3ddfa939f416ca40.zip | |
Handle Linux Capabilities correctly
If user sets capabilities list we need handle minimal capabilities.
Also handle seccomp-policy being passed in.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'pkg/specgen/generate/container.go')
| -rw-r--r-- | pkg/specgen/generate/container.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/specgen/generate/container.go b/pkg/specgen/generate/container.go index 1ca89edfe..31465d8bf 100644 --- a/pkg/specgen/generate/container.go +++ b/pkg/specgen/generate/container.go @@ -141,7 +141,7 @@ func CompleteSpec(ctx context.Context, r *libpod.Runtime, s *specgen.SpecGenerat // Unless already set via the CLI, check if we need to disable process // labels or set the defaults. if len(s.SelinuxOpts) == 0 { - if err := SetLabelOpts(s, r, s.PidNS, s.IpcNS); err != nil { + if err := setLabelOpts(s, r, s.PidNS, s.IpcNS); err != nil { return err } } |