fix: uniqMcs use all cpu

Signed-off-by: ningmingxiao <[email protected]>

Author: ningmingxiao

go-selinux/label/label_linux.go

@@ -30,6 +30,9 @@ func InitLabels(options []string) (plabel string, mlabel string, retErr error) {
 	if !selinux.GetEnabled() {
 		return "", "", nil
 	}
+	if selinux.GetContainerLabelsSize() == int(selinux.CategoryRange*(selinux.CategoryRange-1)/2) {
+		return "", "", fmt.Errorf("cannot allocate selinuxlabel anymore with options %v", options)
+	}
 	processLabel, mountLabel := selinux.ContainerLabels()
 	if processLabel != "" {
 		defer func() {

go-selinux/selinux_linux.go

@@ -85,6 +85,12 @@ var (
 	labels         map[string]string
 )
 
+func GetContainerLabelsSize() int {
+	state.Lock()
+	defer state.Unlock()
+	return len(state.mcsList)
+}
+
 func policyRoot() string {
 	policyRootOnce.Do(func() {
 		policyRootVal = filepath.Join(selinuxDir, readConfig(selinuxTypeTag))