[CRIU] SELinux label on criu socket

Adrian Reber adrian at lisas.de
Fri Feb 15 20:38:57 MSK 2019


Using Podman with SELinux I have following problem:

https://github.com/containers/libpod/issues/2334

The process in the container tries to connect to the CRIU socket which
is denied by the SELinux policy.

Is there a way I can create the socket in runc or Podman and then tell
CRIU to use that socket? That way I could give the socket the correct
SELinux label.

Would that be possible?

		Adrian


More information about the CRIU mailing list