Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
L
lxc
Project
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Chen Yisong
lxc
Commits
b84702ab
Commit
b84702ab
authored
Jul 12, 2017
by
Long Wang
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
doc: s/se_context/selinux.context/g
Signed-off-by:
Long Wang
<
w@laoqinren.net
>
parent
a1d5fdfd
Hide whitespace changes
Inline
Side-by-side
Showing
5 changed files
with
8 additions
and
8 deletions
+8
-8
lxc.te
config/selinux/lxc.te
+1
-1
lxc.container.conf.sgml.in
doc/ja/lxc.container.conf.sgml.in
+2
-2
lxc.container.conf.sgml.in
doc/ko/lxc.container.conf.sgml.in
+2
-2
lxc.container.conf.sgml.in
doc/lxc.container.conf.sgml.in
+2
-2
attach.c
src/tests/attach.c
+1
-1
No files found.
config/selinux/lxc.te
View file @
b84702ab
...
...
@@ -7,7 +7,7 @@
# semodule -i lxc.pp
#
# In your container's lxc config:
# lxc.se
_
context = system_u:system_r:lxc_t:s0:c62,c86,c150,c228
# lxc.se
linux.
context = system_u:system_r:lxc_t:s0:c62,c86,c150,c228
#
# Ensure your container's rootfs files are labeled:
# chcon -R system_u:object_r:lxc_file_t:s0:c62,c86,c150,c228 /path/to/rootfs
...
...
doc/ja/lxc.container.conf.sgml.in
View file @
b84702ab
...
...
@@ -1764,7 +1764,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp>
<variablelist>
<varlistentry>
<term>
<option>lxc.se
_
context</option>
<option>lxc.se
linux.
context</option>
</term>
<listitem>
<para>
...
...
@@ -1774,7 +1774,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp>
-->
コンテナが従うべき SELinux コンテキストを指定するか、<command>unconfined_t</command> を指定します。例えば以下のように設定します。
</para>
<programlisting>lxc.se
_
context = system_u:system_r:lxc_t:s0:c22</programlisting>
<programlisting>lxc.se
linux.
context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem>
</varlistentry>
</variablelist>
...
...
doc/ko/lxc.container.conf.sgml.in
View file @
b84702ab
...
...
@@ -1704,7 +1704,7 @@ proc proc proc nodev,noexec,nosuid 0 0
<variablelist>
<varlistentry>
<term>
<option>lxc.se
_
context</option>
<option>lxc.se
linux.
context</option>
</term>
<listitem>
<para>
...
...
@@ -1714,7 +1714,7 @@ proc proc proc nodev,noexec,nosuid 0 0
-->
컨테이너가 따라야할 SELinux 컨텍스트를 지정하거나, <command>unconfined_t</command>를 지정할 수 있다. 예를 들어 아래와 같이 지정 가능하다.
</para>
<programlisting>lxc.se
_
context = system_u:system_r:lxc_t:s0:c22</programlisting>
<programlisting>lxc.se
linux.
context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem>
</varlistentry>
</variablelist>
...
...
doc/lxc.container.conf.sgml.in
View file @
b84702ab
...
...
@@ -1278,14 +1278,14 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
<variablelist>
<varlistentry>
<term>
<option>lxc.se
_
context</option>
<option>lxc.se
linux.
context</option>
</term>
<listitem>
<para>
Specify the SELinux context under which the container should
be run or <command>unconfined_t</command>. For example
</para>
<programlisting>lxc.se
_
context = system_u:system_r:lxc_t:s0:c22</programlisting>
<programlisting>lxc.se
linux.
context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem>
</varlistentry>
</variablelist>
...
...
src/tests/attach.c
View file @
b84702ab
...
...
@@ -51,7 +51,7 @@ static void test_lsm_detect(void)
{
if
(
lsm_enabled
())
{
if
(
!
strcmp
(
lsm_name
(),
"SELinux"
))
{
lsm_config_key
=
"lxc.se
_
context"
;
lsm_config_key
=
"lxc.se
linux.
context"
;
lsm_label
=
"unconfined_u:unconfined_r:lxc_t:s0-s0:c0.c1023"
;
}
else
if
(
!
strcmp
(
lsm_name
(),
"AppArmor"
))
{
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment