containers / udica

This repository contains a tool for generating SELinux security profiles for containers
GNU General Public License v3.0
488 stars 47 forks source link

Improve label collection for mounts and devices #111

Closed vmojzis closed 2 years ago

vmojzis commented 2 years ago

Catch exception triggered by selabel_lookup when it encounters file context definition containing "<>"

Real label of given path may differ from what selable_lookup (matchpathcon) returns. Udica should allow access to both.

Fixes: https://github.com/containers/udica/issues/98 https://github.com/containers/udica/issues/109