On 9/21/21 09:28, Jorge Fábregas wrote:
On 9/21/21 5:18 AM, Daniel Walsh wrote:
Please show me an example.
$ mkdir /tmp/foobar $ podman run -v /tmp/foobar:/tmp/foobar:Z ubi8 ls -Zd /tmp/foobar system_u:object_r:container_file_t:s0:c937,c994 /tmp/foobar $ podman run -v /tmp/foobar:/tmp/foobar:z ubi8 ls -Zd /tmp/foobar system_u:object_r:container_file_t:s0 /tmp/foobar Hi Dan,
Yes, that does work but it doesn't for named volumes. I forgot to mention that bit.
Here are the tests on RHEL 8.4:
# bind mounts https://ibb.co/jwYrSML
# named volume https://ibb.co/1rQ2C10
If I do the last test on Fedora 33 it *does* creates the "private unshared label".
HTH, Jorge _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
Named volumes are expected to be shared and default to it.