From 73c5d2d2df8e542b2153bc0ba6e772598278e34a Mon Sep 17 00:00:00 2001 From: Victor Vieux Date: Tue, 30 Sep 2014 00:59:29 +0000 Subject: [PATCH] update docs Signed-off-by: Victor Vieux Upstream-commit: c5f3535b068342b71efeb3cbe8565e59d9227f1f Component: cli --- components/cli/docs/sources/reference/run.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/components/cli/docs/sources/reference/run.md b/components/cli/docs/sources/reference/run.md index 095319f133..f5d6cc45e5 100644 --- a/components/cli/docs/sources/reference/run.md +++ b/components/cli/docs/sources/reference/run.md @@ -231,23 +231,23 @@ the container exits**, you can add the `--rm` flag: --security-opt="label:type:TYPE" : Set the label type for the container --security-opt="label:level:LEVEL" : Set the label level for the container --security-opt="label:disable" : Turn off label confinement for the container + --secutity-opt="apparmor:PROFILE" : Set the apparmor profile to be applied + to the container -If you want to use the same label for multiple containers you can override use -the security-opt flag to select an MCS level. This is a common practive for MLS +If you want to use the same label for multiple containers, you can override use +the security-opt flag to select an MCS level. This is a common practice for MLS systems. But it also might help in cases where you want to share the same content between containers. Run the following command. # docker run --security-opt label:level:s0:c100,c200 -i -t fedora bash -Run the follwing command if you want to disable the labeling controls for just +Run the following command if you want to disable the labeling controls for just this container. # docker run --security-opt label:disable -i -t fedora bash -If you decide you would like to work with a tighter policy on your container. -For example if you want to run a container that could only listen on apache -ports, and not connect to the network. You could select an alternate type to -run the container execute the following command. +Run the following command if you want to run a container that could only listen +on apache ports. # docker run --security-opt label:type:svirt_apache_t -i -t fedora bash