21 Sep
2021
21 Sep
'21
10:28 p.m.
On 9/21/21 5:18 AM, Daniel Walsh wrote:
Please show me an example.
$ mkdir /tmp/foobar $ podman run -v /tmp/foobar:/tmp/foobar:Z ubi8 ls -Zd /tmp/foobar system_u:object_r:container_file_t:s0:c937,c994 /tmp/foobar $ podman run -v /tmp/foobar:/tmp/foobar:z ubi8 ls -Zd /tmp/foobar system_u:object_r:container_file_t:s0 /tmp/foobar
Hi Dan, Yes, that does work but it doesn't for named volumes. I forgot to mention that bit. Here are the tests on RHEL 8.4: # bind mounts https://ibb.co/jwYrSML # named volume https://ibb.co/1rQ2C10 If I do the last test on Fedora 33 it *does* creates the "private unshared label". HTH, Jorge