From 0cfc477408af88dcbfc0bb040818906162a98d6f Mon Sep 17 00:00:00 2001 From: Lukas Holecek Date: Jan 16 2020 13:15:37 +0000 Subject: Use shared flag 'z' for SELinux managed mounts Signed-off-by: Lukas Holecek --- diff --git a/docker-compose.yml b/docker-compose.yml index 3e0bf9d..3d49d17 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -8,7 +8,7 @@ services: command: ["bash", "-c", "./docker/dev-command.sh"] volumes: - ./:/code:ro,z - - ./docker/home:/home/dev:Z + - ./docker/home:/home/dev:rw,z - ./docker/greenwave-settings.py:/etc/greenwave/settings.py:ro,z - ./conf/policies/:/etc/greenwave/policies/:ro,z - ./conf/subject_types/:/etc/greenwave/subject_types/:ro,z @@ -36,8 +36,8 @@ services: working_dir: /code command: ["bash", "-c", "/start.sh"] volumes: - - ../resultsdb:/code:ro,Z - - ./docker/home:/home/dev:Z + - ../resultsdb:/code:ro,z + - ./docker/home:/home/dev:rw,z - ./docker/resultsdb-command.sh:/start.sh:ro,z - ./docker/resultsdb-settings.py:/etc/resultsdb/settings.py:ro,z - ./docker/resultsdb.conf:/etc/httpd/conf.d/resultsdb.conf:ro,z @@ -60,8 +60,8 @@ services: env_file: ["docker/waiverdb.env"] command: ["bash", "-c", "/start.sh"] volumes: - - ../waiverdb:/code:ro,Z - - ./docker/home:/home/dev:Z + - ../waiverdb:/code:ro,z + - ./docker/home:/home/dev:rw,z - ./docker/waiverdb-command.sh:/start.sh:ro,z - ./docker/waiverdb-settings.py:/etc/waiverdb/settings.py:ro,z - ./docker/client_secrets.json:/etc/secret/client_secrets.json:ro,z