From: Lennart Poettering <lennart@poettering.net>
Date: Fri, 29 Jul 2011 01:25:05 +0000 (+0200)
Subject: nspawn: properly bind mount /sys/fs/selinux into container, since /selinux moved... 
X-Git-Tag: v32~1
X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=6b2bf923534c20eb92ac0e9ad0c5897a9257ccef

nspawn: properly bind mount /sys/fs/selinux into container, since /selinux moved there
---

diff --git a/src/nspawn.c b/src/nspawn.c
index 8d7e0d03a..a1ed425f0 100644
--- a/src/nspawn.c
+++ b/src/nspawn.c
@@ -133,8 +133,8 @@ static int mount_all(const char *dest) {
                 { "/dev/pts",  "/dev/pts",  "bind",  NULL,       MS_BIND,                      true  },
                 { "tmpfs",     "/run",      "tmpfs", "mode=755", MS_NOSUID|MS_NODEV,           true  },
 #ifdef HAVE_SELINUX
-                { "/selinux",  "/selinux",  "bind",  NULL,       MS_BIND,                      false },  /* Bind mount first */
-                { "/selinux",  "/selinux",  "bind",  NULL,       MS_BIND|MS_RDONLY|MS_REMOUNT, false },  /* Then, make it r/o */
+                { "/sys/fs/selinux", "/sys/fs/selinux", "bind", NULL, MS_BIND,                      false },  /* Bind mount first */
+                { "/sys/fs/selinux", "/sys/fs/selinux", "bind", NULL, MS_BIND|MS_RDONLY|MS_REMOUNT, false },  /* Then, make it r/o */
 #endif
         };