mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-04-29 02:12:36 +02:00
e1e63d14f8
Set the `container_engine_t` SELinux on the **outer** Podman container, so that gVisor does not break on systems where SELinux is enforcing. This label is provided for container engines running within a container, which fits our `runsc` within `crun` situation. We have considered using the more permissive `label=disable` option, to disable SELinux labels altogether, but we want to take advantage of as many SELinux protections as we can, even for the **outer** container. Fixes #880 |
||
|---|---|---|
| .. | ||
| conversion | ||
| gui | ||
| gvisor_wrapper | ||
| isolation_provider | ||
| __init__.py | ||
| args.py | ||
| cli.py | ||
| document.py | ||
| errors.py | ||
| logic.py | ||
| settings.py | ||
| util.py | ||