spiegel_podman/libpod
Adrian Reber 0a8a1deed1
Label CRIU log files correctly
CRIU creates a log file during checkpointing in .../userdata/dump.log.
The problem with this file is, is that CRIU injects a parasite code into
the container processes and this parasite code also writes to the same
log file. At this point a process from the inside of the container is
trying to access the log file on the outside of the container and
SELinux prohibits this. To enable writing to the log file from the
injected parasite code, this commit creates an empty log file and labels
the log file with c.MountLabel(). CRIU uses existing files when writing
it logs so the log file label persists and now, with the correct label,
SELinux no longer blocks access to the log file.

Signed-off-by: Adrian Reber <areber@redhat.com>
2019-02-26 11:28:54 +01:00
..
common Remove some unused data structures and code 2018-12-06 23:31:54 +01:00
driver switch projectatomic to containers 2018-08-16 17:12:36 +00:00
image podman-remote load image 2019-02-21 10:11:19 -06:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock Do not make renumber shut down the runtime 2019-02-21 10:51:42 -05:00
testdata libpod/container_internal: Deprecate implicit hook directories 2018-12-03 12:54:30 -08:00
boltdb_state.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
boltdb_state_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go podman-remote inspect 2019-01-18 15:43:11 -06:00
container.go Fix volume handling in podman 2019-02-14 13:21:52 -05:00
container_api.go OpenTracing support added to start, stop, run, create, pull, and ps 2019-02-18 09:57:08 -05:00
container_attach_linux.go Fix manual detach from containers to not wait for exit 2019-02-12 10:14:57 -05:00
container_attach_unsupported.go Add darwin support for remote-client 2019-01-11 11:30:28 -06:00
container_commit.go Vendor Buildah v1.7 2019-02-22 16:40:05 -05:00
container_graph.go pod infra container is started before a container in a pod is run, started, or attached. 2019-02-15 16:39:24 -05:00
container_graph_test.go Update unit tests to use in-memory lock manager 2019-01-04 09:51:09 -05:00
container_inspect.go apparmor: apply default profile at container initialization 2019-01-09 22:18:11 +01:00
container_internal.go Don't start running dependencies 2019-02-19 09:28:58 -05:00
container_internal_linux.go Label CRIU log files correctly 2019-02-26 11:28:54 +01:00
container_internal_test.go podman-remote inspect 2019-01-18 15:43:11 -06:00
container_internal_unsupported.go Fix build on non-Linux 2018-12-06 23:31:54 +01:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_top_linux.go vendor latest containers/psgo 2018-07-26 17:01:40 +00:00
container_top_unsupported.go podman-top: use containers/psgo 2018-07-19 20:47:52 +00:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Don't output inodes created to run a container 2018-09-21 09:45:14 +00:00
errors.go Fix manual detach from containers to not wait for exit 2019-02-12 10:14:57 -05:00
in_memory_state.go Add ability to rewrite pod configs in the database 2019-02-21 10:51:42 -05:00
info.go libpod: allow multiple oci runtimes 2019-01-14 10:03:40 +01:00
kube.go show container ports of network namespace 2019-02-13 13:51:23 -06:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go rootless: support port redirection from the host 2019-01-19 20:45:07 +01:00
networking_unsupported.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
oci.go oci: do not set XDG_RUNTIME_DIR twice 2019-02-11 12:38:09 +01:00
oci_linux.go Use also a struct to pass options to Restore() 2018-11-28 08:00:37 +01:00
oci_unsupported.go Use also a struct to pass options to Restore() 2018-11-28 08:00:37 +01:00
options.go Fix up handling of user defined network namespaces 2019-02-23 05:47:27 -05:00
pod.go Convert pods to SHM locks 2019-01-04 09:51:09 -05:00
pod_api.go add timeout to pod stop 2018-12-07 10:27:41 -06:00
pod_internal.go pod infra container is started before a container in a pod is run, started, or attached. 2019-02-15 16:39:24 -05:00
pod_top_linux.go Add podman pod top 2018-08-23 15:01:17 +00:00
pod_top_unsupported.go Add podman pod top 2018-08-23 15:01:17 +00:00
runtime.go Do not make renumber shut down the runtime 2019-02-21 10:51:42 -05:00
runtime_ctr.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
runtime_img.go podman-remote load image 2019-02-21 10:11:19 -06:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_pod.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
runtime_pod_infra_linux.go Changes to container runlabel for toolbox project 2019-01-30 08:44:58 -06:00
runtime_pod_linux.go pod infra container is started before a container in a pod is run, started, or attached. 2019-02-15 16:39:24 -05:00
runtime_pod_unsupported.go Added option to share kernel namespaces in libpod and podman 2018-08-23 18:16:28 +00:00
runtime_renumber.go Do not make renumber shut down the runtime 2019-02-21 10:51:42 -05:00
runtime_volume.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
runtime_volume_linux.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
runtime_volume_unsupported.go Add darwin support for remote-client 2019-01-11 11:30:28 -06:00
state.go Add ability to rewrite pod configs in the database 2019-02-21 10:51:42 -05:00
state_test.go Add ability to rewrite pod configs in the database 2019-02-21 10:51:42 -05:00
stats.go Add ability for ubuntu to be tested 2018-10-03 12:45:37 -05:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
storage.go OpenTracing support added to start, stop, run, create, pull, and ps 2019-02-18 09:57:08 -05:00
util.go Fix build on non-Linux 2018-12-06 23:31:54 +01:00
util_linux.go Fix build on non-Linux 2018-12-06 23:31:54 +01:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go Fix build on non-Linux OSes 2018-08-15 18:07:04 +00:00
version.go enable podman-remote version 2019-01-21 15:23:30 -06:00
volume.go Remove locks from volumes 2019-02-21 10:51:42 -05:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00