On 9/21/21 5:18 AM, Daniel Walsh wrote:
> Please show me an example.
>
> $ mkdir /tmp/foobar
> $ podman run -v /tmp/foobar:/tmp/foobar:Z ubi8 ls -Zd /tmp/foobar
> system_u:object_r:container_file_t:s0:c937,c994 /tmp/foobar
> $ podman run -v /tmp/foobar:/tmp/foobar:z ubi8 ls -Zd /tmp/foobar
> system_u:object_r:container_file_t:s0 /tmp/foobar
Hi Dan,
Yes, that does work but it doesn't for named volumes. I forgot to
mention that bit.
Here are the tests on RHEL 8.4:
# bind mounts
https://ibb.co/jwYrSML
# named volume
https://ibb.co/1rQ2C10
If I do the last test on Fedora 33 it *does* creates the "private
unshared label".
HTH,
Jorge
_______________________________________________
Podman mailing list -- podman(a)lists.podman.io
To unsubscribe send an email to podman-leave(a)lists.podman.io