[cpp-linbuild] 02/03: Update SELinux labels on Docker bind mount points

[John W. O'Brien]

This is an automated email from the git hooks/post-receive script.

obrienjw pushed a commit to branch main
in repository cpp-linbuild.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-linbuild.git;a=commit;h=d8d79d7cfbdf4bec96581b307946f321686040bb

commit d8d79d7cfbdf4bec96581b307946f321686040bb
Author: John W. O'Brien <john at saltant.com>
AuthorDate: Thu Jan 6 23:09:17 2022 +0000

    Update SELinux labels on Docker bind mount points
    
    In the expected scenario (in a user's homedir), based on the test
    system behavior (Rocky 8.5, podman 3.3.1), this means:
    
    Before: unconfined_u:object_r:user_home_t:s0
    After: system_u:object_r:container_file_t:s0
    
    This does not affect subsequent user operations on the re-labeled files
    and directories.
---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index d19661a..f1d5aa8 100644
--- a/Makefile
+++ b/Makefile
@@ -233,8 +233,8 @@ $$($(1)_$(2)_token): $$($(1)_$(2)_image_token) $(SOURCEDIR)/$$($(1)_DISTFILE) $(
 	grep -E "^Version:[[:space:]]+$$($(1)_VERSION)$$$$" $(SPECDIR)/$$($(1)_COMPNAME).spec
 	@echo "==> Building $(1) on $(2)"
 	docker run -it --rm \
-		-v $(srcdir)os/$(2)/products:/opt/build/external/out \
-		-v $(srcdir)common:/opt/build/external/in \
+		-v $(srcdir)os/$(2)/products:/opt/build/external/out:z \
+		-v $(srcdir)common:/opt/build/external/in:z \
 		shibboleth/$(2):$($(1)_COMPNAME) \
 		/bin/sh /opt/build/external/in/build.sh $($(1)_COMPNAME)
 	touch $$($(1)_$(2)_token)

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.