On 9/21/21 5:18 AM, Daniel Walsh wrote:
Please show me an example.
$ mkdir /tmp/foobar
$ podman run -v /tmp/foobar:/tmp/foobar:Z ubi8 ls -Zd /tmp/foobar
system_u:object_r:container_file_t:s0:c937,c994 /tmp/foobar
$ podman run -v /tmp/foobar:/tmp/foobar:z ubi8 ls -Zd /tmp/foobar
system_u:object_r:container_file_t:s0 /tmp/foobar
Hi Dan,
Yes, that does work but it doesn't for named volumes. I forgot to
mention that bit.
Here are the tests on RHEL 8.4:
# bind mounts
https://ibb.co/jwYrSML
# named volume
https://ibb.co/1rQ2C10
If I do the last test on Fedora 33 it *does* creates the "private
unshared label".
HTH,
Jorge