dwalsh added a new comment to an issue you are following:
``
Why would /var/srv be totally labeled as container content? I could see
/var/srv/containers or something like that.
ALso :z relabels to container_file_t:s0 not container_share_t. container_share_t is
read/only to the containers, while container_file_t:s0 is writable by ALL of the
containers.
Labeling something container_file_t:s0 allows all of the containers to attack each others
content based on SELinux.
``
To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/505