autorestic icon indicating copy to clipboard operation
autorestic copied to clipboard

Make docker volumes work with SELinux in enforcing mode

Open zenofile opened this issue 1 year ago • 0 comments

Currently, when running on a host OS where SELinux is in Enforcing mode, files inside docker volumes cannot be read due to insufficient permissions with AVC denials piling up in the audit log.

With a minor modification to https://github.com/cupcakearmy/autorestic/blob/6990bf6adc200e7e5a38e76e8f07c4060d3650f1/internal/backend.go#L161-L167 adding --security-opt label=disable to disable label separation for the autorestic container, everything works as intended.

Tested with podman instead of docker.

zenofile avatar Sep 09 '22 21:09 zenofile