Skip to content

L
lxc
Commit b84702ab by Long Wang
Options

doc: s/se_context/selinux.context/g

Signed-off-by: 's avatarLong Wang <w@laoqinren.net>
parent a1d5fdfd
Showing with 8 additions and 8 deletions
config/selinux/lxc.te
...@@ -7,7 +7,7 @@ ...@@ -7,7 +7,7 @@
# semodule -i lxc.pp # semodule -i lxc.pp
# #
# In your container's lxc config: # In your container's lxc config:
# lxc.se_context = system_u:system_r:lxc_t:s0:c62,c86,c150,c228 # lxc.selinux.context = system_u:system_r:lxc_t:s0:c62,c86,c150,c228
# #
# Ensure your container's rootfs files are labeled: # Ensure your container's rootfs files are labeled:
# chcon -R system_u:object_r:lxc_file_t:s0:c62,c86,c150,c228 /path/to/rootfs # chcon -R system_u:object_r:lxc_file_t:s0:c62,c86,c150,c228 /path/to/rootfs
......
doc/ja/lxc.container.conf.sgml.in
...@@ -1764,7 +1764,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp> ...@@ -1764,7 +1764,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp>
<variablelist> <variablelist>
<varlistentry> <varlistentry>
<term> <term>
<option>lxc.se_context</option> <option>lxc.selinux.context</option>
</term> </term>
<listitem> <listitem>
<para> <para>
...@@ -1774,7 +1774,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp> ...@@ -1774,7 +1774,7 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp>
--> -->
コンテナが従うべき SELinux コンテキストを指定するか、<command>unconfined_t</command> を指定します。例えば以下のように設定します。 コンテナが従うべき SELinux コンテキストを指定するか、<command>unconfined_t</command> を指定します。例えば以下のように設定します。
</para> </para>
<programlisting>lxc.se_context = system_u:system_r:lxc_t:s0:c22</programlisting> <programlisting>lxc.selinux.context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
......
doc/ko/lxc.container.conf.sgml.in
...@@ -1704,7 +1704,7 @@ proc proc proc nodev,noexec,nosuid 0 0 ...@@ -1704,7 +1704,7 @@ proc proc proc nodev,noexec,nosuid 0 0
<variablelist> <variablelist>
<varlistentry> <varlistentry>
<term> <term>
<option>lxc.se_context</option> <option>lxc.selinux.context</option>
</term> </term>
<listitem> <listitem>
<para> <para>
...@@ -1714,7 +1714,7 @@ proc proc proc nodev,noexec,nosuid 0 0 ...@@ -1714,7 +1714,7 @@ proc proc proc nodev,noexec,nosuid 0 0
--> -->
컨테이너가 따라야할 SELinux 컨텍스트를 지정하거나, <command>unconfined_t</command>를 지정할 수 있다. 예를 들어 아래와 같이 지정 가능하다. 컨테이너가 따라야할 SELinux 컨텍스트를 지정하거나, <command>unconfined_t</command>를 지정할 수 있다. 예를 들어 아래와 같이 지정 가능하다.
</para> </para>
<programlisting>lxc.se_context = system_u:system_r:lxc_t:s0:c22</programlisting> <programlisting>lxc.selinux.context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
......
doc/lxc.container.conf.sgml.in
...@@ -1278,14 +1278,14 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA ...@@ -1278,14 +1278,14 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
<variablelist> <variablelist>
<varlistentry> <varlistentry>
<term> <term>
<option>lxc.se_context</option> <option>lxc.selinux.context</option>
</term> </term>
<listitem> <listitem>
<para> <para>
Specify the SELinux context under which the container should Specify the SELinux context under which the container should
be run or <command>unconfined_t</command>. For example be run or <command>unconfined_t</command>. For example
</para> </para>
<programlisting>lxc.se_context = system_u:system_r:lxc_t:s0:c22</programlisting> <programlisting>lxc.selinux.context = system_u:system_r:lxc_t:s0:c22</programlisting>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
......
src/tests/attach.c
...@@ -51,7 +51,7 @@ static void test_lsm_detect(void) ...@@ -51,7 +51,7 @@ static void test_lsm_detect(void)
{ {
if (lsm_enabled()) { if (lsm_enabled()) {
if (!strcmp(lsm_name(), "SELinux")) { if (!strcmp(lsm_name(), "SELinux")) {
lsm_config_key = "lxc.se_context"; lsm_config_key = "lxc.selinux.context";
lsm_label = "unconfined_u:unconfined_r:lxc_t:s0-s0:c0.c1023"; lsm_label = "unconfined_u:unconfined_r:lxc_t:s0-s0:c0.c1023";
} }
else if (!strcmp(lsm_name(), "AppArmor")) { else if (!strcmp(lsm_name(), "AppArmor")) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment