PR#533: Use shared flag 'z' for SELinux managed mounts - greenwave

Lukas Holecek • 4 years ago

0cfc477

docker-compose.yml

file modified

+5 -5

		`@@ -8,7 +8,7 @@`
		`command: ["bash", "-c", "./docker/dev-command.sh"]`
		`volumes:`
		`- ./:/code:ro,z`
		`- - ./docker/home:/home/dev:Z`
		`+ - ./docker/home:/home/dev:rw,z`
		`- ./docker/greenwave-settings.py:/etc/greenwave/settings.py:ro,z`
		`- ./conf/policies/:/etc/greenwave/policies/:ro,z`
		`- ./conf/subject_types/:/etc/greenwave/subject_types/:ro,z`
		`@@ -36,8 +36,8 @@`
		`working_dir: /code`
		`command: ["bash", "-c", "/start.sh"]`
		`volumes:`
		`- - ../resultsdb:/code:ro,Z`
		`- - ./docker/home:/home/dev:Z`
		`+ - ../resultsdb:/code:ro,z`
		`+ - ./docker/home:/home/dev:rw,z`
		`- ./docker/resultsdb-command.sh:/start.sh:ro,z`
		`- ./docker/resultsdb-settings.py:/etc/resultsdb/settings.py:ro,z`
		`- ./docker/resultsdb.conf:/etc/httpd/conf.d/resultsdb.conf:ro,z`
		`@@ -60,8 +60,8 @@`
		`env_file: ["docker/waiverdb.env"]`
		`command: ["bash", "-c", "/start.sh"]`
		`volumes:`
		`- - ../waiverdb:/code:ro,Z`
		`- - ./docker/home:/home/dev:Z`
		`+ - ../waiverdb:/code:ro,z`
		`+ - ./docker/home:/home/dev:rw,z`
		`- ./docker/waiverdb-command.sh:/start.sh:ro,z`
		`- ./docker/waiverdb-settings.py:/etc/waiverdb/settings.py:ro,z`
		`- ./docker/client_secrets.json:/etc/secret/client_secrets.json:ro,z`