From 9132be46ed3aec156d1c26648124464af5c8b779 Mon Sep 17 00:00:00 2001 From: "Jason A. Donenfeld" Date: Sun, 17 Jun 2018 00:06:58 +0200 Subject: dns-hatchet: apply resolv.conf's selinux context to new resolv.conf --- contrib/examples/dns-hatchet/hatchet.bash | 2 ++ 1 file changed, 2 insertions(+) (limited to 'contrib/examples') diff --git a/contrib/examples/dns-hatchet/hatchet.bash b/contrib/examples/dns-hatchet/hatchet.bash index 793684c..5857cc1 100644 --- a/contrib/examples/dns-hatchet/hatchet.bash +++ b/contrib/examples/dns-hatchet/hatchet.bash @@ -17,9 +17,11 @@ set_dns() { printf 'nameserver %s\n' "${DNS[@]}" } | unshare -m --propagation shared bash -c "$(cat <<-_EOF set -e + context="\$(stat -c %C /etc/resolv.conf 2>/dev/null)" || unset context mount --make-private /dev/shm mount -t tmpfs none /dev/shm cat > /dev/shm/resolv.conf + [[ -z \$context || \$context == "?" ]] || chcon "\$context" /dev/shm/resolv.conf 2>/dev/null || true mount -o remount,ro /dev/shm mount -o bind,ro /dev/shm/resolv.conf /etc/resolv.conf _EOF -- cgit v1.2.3-59-g8ed1b