holm/podman-compose
1
0
Fork 0
forked from extern/podman-compose
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use SELinux mount flag for secrets

Browse Source 
Signed-off-by: Henry Reed <github.69ofd@simplelogin.com>
This commit is contained in:
Henry Reed 2022-10-18 18:24:41 -07:00 committed by Muayyad Alsadi
parent 0b853f29f4
commit 874192568f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
podman_compose.py
View File

@ -578,7 +578,7 @@ def get_secret_args(compose, cnt, secret):
source_file = os.path.realpath(
os.path.join(basedir, os.path.expanduser(source_file))
)
volume_ref = ["--volume", f"{source_file}:{dest_file}:ro,rprivate,rbind"]
volume_ref = ["--volume", f"{source_file}:{dest_file}:Z,ro,rprivate,rbind"]
if uid or gid or mode:
sec = target if target else secret_name
log(