On Sun, 25 Jan 2015 14:49:46 +0100 =?utf-8?B?RsOpbGl4?= Sipma <[email protected]> wrote:

Hi,

> Woops... selinux is actually installed and enabled (permissive mode) on
> the host

The problem here is probably that the selinuxfs (under /sys/fs/selinux) is not mounted at all or mounted r/w in the lxc container.

You should bind mount it read-only inside the container with something like this in the container fstab:

/sys/fs/selinux /var/lib/lxc/myContainer/rootfs/sys/fs/selinux none bind,ro 0,0

This way the selinux aware application will think that selinux is disable and will not bother trying to do anything with it

Cheers,

Laurent Bigonville

_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel

Reply via email to