diff --git a/docs/source/markdown/options/volume.md b/docs/source/markdown/options/volume.md index 116ed4c078ed..cd5882775179 100644 --- a/docs/source/markdown/options/volume.md +++ b/docs/source/markdown/options/volume.md @@ -81,12 +81,15 @@ objects on the shared volumes. The **z** option tells Podman that two or more content with a shared content label. Shared volume labels allow all containers to read/write content. The **Z** option tells Podman to label the content with a private unshared label Only the current <> can use a private -volume. Relabeling walks the file system under the volume and changes the label -on each file, if the volume has thousands of inodes, this process takes a -long time, delaying the start of the <>. If the volume -was previously relabeled with the `z` option, Podman is optimized to not relabel -a second time. If files are moved into the volume, then the labels can be -manually change with the `chcon -Rt container_file_t PATH` command. +volume. Note: all containers within a `pod` share the same SELinux label. This +means all containers within said pod can read/write volumes shared into the +container created with the `:Z` on any of one the containers. Relabeling walks +the file system under the volume and changes the label on each file, if the +volume has thousands of inodes, this process takes a long time, delaying the +start of the <>. If the volume was previously relabeled with the +`z` option, Podman is optimized to not relabel a second time. If files are +moved into the volume, then the labels can be manually change with the +`chcon -Rt container_file_t PATH` command. Note: Do not relabel system files and directories. Relabeling system content might cause other confined services on the machine to fail. For these types