package label

import "github.com/opencontainers/selinux/go-selinux/label"

Index ¶

• func DisableSecOpt() []string
• func DupSecOpt(src string) []string
• func FormatMountLabel(src string, mountLabel string) string
• func GenLabels(options string) (string, string, error)
• func GetFileLabel(path string) (string, error)
• func GetPidLabel(pid int) (string, error)
• func GetROMountLabel() string
• func Init()
• func InitLabels(options []string) (string, string, error)
• func IsShared(label string) bool
• func Relabel(path string, fileLabel string, shared bool) error
• func RelabelNeeded(label string) bool
• func ReleaseLabel(label string) error
• func ReserveLabel(label string) error
• func SetFileCreateLabel(fileLabel string) error
• func SetFileLabel(path string, fileLabel string) error
• func SetProcessLabel(processLabel string) error
• func Validate(label string) error

Functions ¶

func DisableSecOpt ¶

func DisableSecOpt() []string

DisableSecOpt returns a security opt that can disable labeling support for future container processes

func DupSecOpt ¶

func DupSecOpt(src string) []string

DupSecOpt takes a process label and returns security options that can be used to set duplicate labels on future container processes

func FormatMountLabel ¶

func FormatMountLabel(src string, mountLabel string) string

func GenLabels ¶

func GenLabels(options string) (string, string, error)

func GetFileLabel ¶

func GetFileLabel(path string) (string, error)

func GetPidLabel ¶

func GetPidLabel(pid int) (string, error)

func GetROMountLabel ¶

func GetROMountLabel() string

func Init ¶

func Init()

func InitLabels ¶

func InitLabels(options []string) (string, string, error)

InitLabels returns the process label and file labels to be used within the container. A list of options can be passed into this function to alter the labels.

func IsShared ¶

func IsShared(label string) bool

IsShared checks that the label includes a "shared" mark

func Relabel ¶

func Relabel(path string, fileLabel string, shared bool) error

func RelabelNeeded ¶

func RelabelNeeded(label string) bool

RelabelNeeded checks whether the user requested a relabel

func ReleaseLabel ¶

func ReleaseLabel(label string) error

func ReserveLabel ¶

func ReserveLabel(label string) error

func SetFileCreateLabel ¶

func SetFileCreateLabel(fileLabel string) error

func SetFileLabel ¶

func SetFileLabel(path string, fileLabel string) error

func SetProcessLabel ¶

func SetProcessLabel(processLabel string) error

func Validate ¶

func Validate(label string) error

Validate checks that the label does not include unexpected options

Source Files ¶

label.go