Revert "Use more lenient SELinux mount flag for secrets"

This reverts commit 75de39c239.
This commit is contained in:
Muayyad Alsadi 2023-04-10 12:26:42 +03:00
parent 75de39c239
commit e6b1eabe4c

View File

@ -578,7 +578,7 @@ def get_secret_args(compose, cnt, secret):
source_file = os.path.realpath( source_file = os.path.realpath(
os.path.join(basedir, os.path.expanduser(source_file)) os.path.join(basedir, os.path.expanduser(source_file))
) )
volume_ref = ["--volume", f"{source_file}:{dest_file}:z,ro,rprivate,rbind"] volume_ref = ["--volume", f"{source_file}:{dest_file}:Z,ro,rprivate,rbind"]
if uid or gid or mode: if uid or gid or mode:
sec = target if target else secret_name sec = target if target else secret_name
log( log(