selinux: relabel /dev/shm when HostIPC=false

See k3s-io/cri@e9ad336
k3s-io · Dec 3, 2020 · 77bf0fa · 77bf0fa
1 parent 2bf111a
commit 77bf0fa
Show file tree

Hide file tree

Showing 14 changed files with 119 additions and 1,949 deletions.
diff --git a/vendor.conf b/vendor.conf
@@ -52,7 +52,7 @@ google.golang.org/grpc                              v1.23.0
 gotest.tools                                        v2.3.0
 
 # cri dependencies
-github.com/containerd/cri                           v1.3.0-k3s.7 https://github.com/rancher/cri.git
+github.com/containerd/cri                           v1.3.0-k3s.9 https://github.com/rancher/cri.git
 github.com/davecgh/go-spew                          v1.1.1
 github.com/docker/distribution                      0d3efadf0154c2b8a4e7b6621fff9809655cc580
 github.com/docker/docker                            86f080cff0914e9694068ed78d503701667c4c00

diff --git a/vendor/github.com/containerd/cri/pkg/seccomp/seccomp_linux.go b/vendor/github.com/containerd/cri/pkg/seccomp/seccomp_linux.go
diff --git a/vendor/github.com/containerd/cri/pkg/seccomp/seccomp_unsupported.go b/vendor/github.com/containerd/cri/pkg/seccomp/seccomp_unsupported.go
diff --git a/vendor/github.com/containerd/cri/pkg/server/container_create.go b/vendor/github.com/containerd/cri/pkg/server/container_create.go
diff --git a/vendor/github.com/containerd/cri/pkg/server/image_pull.go b/vendor/github.com/containerd/cri/pkg/server/image_pull.go
diff --git a/vendor/github.com/containerd/cri/pkg/server/service.go b/vendor/github.com/containerd/cri/pkg/server/service.go
diff --git a/vendor/github.com/containerd/cri/vendor.conf b/vendor/github.com/containerd/cri/vendor.conf
diff --git a/vendor/github.com/opencontainers/runc/libcontainer/seccomp/config.go b/vendor/github.com/opencontainers/runc/libcontainer/seccomp/config.go