Daniel J Walsh de12f45688 Fix SELinux on host shared systems in userns ... Currently if you turn on --net=host on a rootless container and have selinux-policy installed in the image, tools running with SELinux will see that the system is SELinux enabled in rootless mode. This patch mounts a tmpfs over /sys/fs/selinux blocking this behaviour. This patch also fixes the fact that if you shared --pid=host we were not masking over certin /proc paths. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>		2019-03-11 15:17:22 -04:00
..
config_linux.go	fix bug --device enable specifying directory as device	2019-03-06 10:14:52 -05:00
config_unsupported.go	Add darwin support for remote-client	2019-01-11 11:30:28 -06:00
createconfig.go	podman healthcheck run (phase 1)	2019-03-05 14:03:55 -06:00
parse.go	Invalid index for array	2018-12-21 09:25:25 -05:00
ports.go	Spell check strings and comments	2018-05-25 08:45:15 +00:00
spec.go	Fix SELinux on host shared systems in userns	2019-03-11 15:17:22 -04:00
spec_test.go	Swap default mount propagation from private to rprivate	2018-09-13 21:35:44 +00:00