https://bugzilla.redhat.com/show_bug.cgi?id=1096816
--- Comment #1 from Daniel Walsh dwalsh@redhat.com --- Libselinux needs to check if the /selinux or /sys/fs/selinux is mounted as read/only and then say SELinux is disabled. This would stop SELinux aware applications from attempting to do SELinux actions while in a container.