[ https://ovirt-jira.atlassian.net/browse/OVIRT-2324?page=com.atlassian.jir... ] Barak Korren commented on OVIRT-2324: ------------------------------------- {quote} When running `sestatus` inside the container... {quote} That is irrelevant, SELinux on the host machine is enforcing for processes inside containers as well. It is enforcing separation between containers and between then and the host OS, this is why you have to use ':Z" or "z:", otherwise, SElinux blocks access for processes inside the container. -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100088)