
26 Oct
2017
26 Oct
'17
2:23 p.m.
On 10/20/2017 09:47 AM, Peter Krempa wrote:
Until now we ignored user-provided backing chains and while detecting the code inherited labels of the parent device. With user provided chains we should keep this functionality, so label of the parent image in the backing chain will be applied if an image-specific label is not present. --- src/security/security_dac.c | 38 +++++++++++++++++++++++++++++--------- 1 file changed, 29 insertions(+), 9 deletions(-)
Reviewed-by: John Ferlan <jferlan@redhat.com> John