{"action":"closed","issue":{"url":"https://api.github.com/repos/NVIDIA/nvidia-docker/issues/818","repository_url":"https://api.github.com/repos/NVIDIA/nvidia-docker","labels_url":"https://api.github.com/repos/NVIDIA/nvidia-docker/issues/818/labels{/name}","comments_url":"https://api.github.com/repos/NVIDIA/nvidia-docker/issues/818/comments","events_url":"https://api.github.com/repos/NVIDIA/nvidia-docker/issues/818/events","html_url":"https://github.com/NVIDIA/nvidia-docker/issues/818","id":356585505,"node_id":"MDU6SXNzdWUzNTY1ODU1MDU=","number":818,"title":"[Security] Docker not get a permission denied in terminal mode (-t) when selinux is activated","user":{"login":"ltupin","id":1016802,"node_id":"MDQ6VXNlcjEwMTY4MDI=","avatar_url":"https://avatars0.githubusercontent.com/u/1016802?v=4","gravatar_id":"","url":"https://api.github.com/users/ltupin","html_url":"https://github.com/ltupin","followers_url":"https://api.github.com/users/ltupin/followers","following_url":"https://api.github.com/users/ltupin/following{/other_user}","gists_url":"https://api.github.com/users/ltupin/gists{/gist_id}","starred_url":"https://api.github.com/users/ltupin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ltupin/subscriptions","organizations_url":"https://api.github.com/users/ltupin/orgs","repos_url":"https://api.github.com/users/ltupin/repos","events_url":"https://api.github.com/users/ltupin/events{/privacy}","received_events_url":"https://api.github.com/users/ltupin/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-09-03T19:18:25Z","updated_at":"2018-12-20T15:42:14Z","closed_at":"2018-12-20T15:42:14Z","author_association":"NONE","body":"---------------------------------------------------\r\nBUG REPORT INFORMATION\r\n---------------------------------------------------\r\n\r\n**Description**\r\n\r\nDocker **not get a permission denied** in terminal mode (-t) when **selinux is activated**.\r\n\r\n**Steps to reproduce the issue:**\r\n1. On a host with GPU\r\n2. With selinux activated\r\n```bash\r\ngetenforce\r\nEnforcing\r\n```\r\n3. If you run the command : \r\n```bash\r\ndocker run -t --runtime=nvidia --rm nvidia/cuda nvidia-smi\r\n```\r\n You will show the result, (ie):\r\n```bash\r\nFri Aug 31 10:00:19 2018\r\n+-----------------------------------------------------------------------------+\r\n| NVIDIA-SMI 396.26                 Driver Version: 396.26                    |\r\n|-------------------------------+----------------------+----------------------+\r\n| GPU  Name        Persistence-M| Bus-Id        Disp.A | Volatile Uncorr. ECC |\r\n| Fan  Temp  Perf  Pwr:Usage/Cap|         Memory-Usage | GPU-Util  Compute M. |\r\n|===============================+======================+======================|\r\n|   0  Tesla P100-PCIE...  Off  | 00000000:00:1F.0 Off |                    0 |\r\n| N/A   32C    P0    28W / 250W |      0MiB / 16280MiB |      0%      Default |\r\n+-------------------------------+----------------------+----------------------+\r\n\r\n+-----------------------------------------------------------------------------+\r\n| Processes:                                                       GPU Memory |\r\n|  GPU       PID   Type   Process name                             Usage      |\r\n|=============================================================================|\r\n|  No running processes found                                                 |\r\n+-----------------------------------------------------------------------------+\r\n```\r\n4. Run the command : \r\n```bash\r\ndocker run --runtime=nvidia --rm nvidia/cuda nvidia-smi\r\n```\r\n\r\nYou will show the result, ie:\r\n```bash\r\ndocker: Error response from daemon: OCI runtime create failed: container_linux.go:348: starting container process caused \"permission denied\": unknown.\r\n```\r\n\r\n**Describe the results you expected:**\r\n```bash\r\ndocker: Error response from daemon: OCI runtime create failed: container_linux.go:348: starting container process caused \"permission denied\": unknown.\r\n```\r\n"}}
{"actor":{"display_login":"RenaudWasTaken"}}