Upstream PR https://github.com/cockpit-project/cockpit-podman/pull/435

Test with cockpit-podman-28.1-1.module+el8.4.0+10073+30e5ea69.noarch and seems the Z/z flag is not work as expected:

Create a container with share/private from cockpit-podman website, and check the container with inspect in the host. And the Mode Z/z is not set as expect:
# podman inspect romantic_elgamal --format "{{.Mounts}}"
[{bind  /mnt/mytest /mnt   [rbind] true rprivate}]

@ypu , this is not the correct way to test that. Mode z/Z has *no influence* on the mount, it is a file system property on the host on the bind mounted directory. E.g.

$ mkdir data
$ ls -ldZ data
drwxr-xr-x. 2 martin martin unconfined_u:object_r:user_tmp_t:s0 40 23. Feb 06:30 data

$ podman run -it -v ./data:/data:z registry.fedoraproject.org/fedora sleep infinity

$ ls -lZd data
drwxr-xr-x. 2 martin martin system_u:object_r:container_file_t:s0 40 23. Feb 06:30 data

^^ see how the z changed the type of the directory to container_file_t

$ podman inspect sharp_babbage --format "{{.Mounts}}"
[{bind  /tmp/data /data   [nosuid nodev rbind] true rprivate}]

The real test is whether you can access the directory inside the container with SELinux enabled:

$ podman exec sharp_babbage touch /data/hello.txt
$ ls -l data/hello.txt 
-rw-r--r--. 1 martin martin 0 23. Feb 06:34 data/hello.txt

Without z/Z this would not work.

Hi Martin,
Thanks a lot for the information. I used to use a named volume with -v and the lable is shows in the Mounts. But you are right it is different from the directory mount. And double checked with cockpit-podman and both private and shared mode works as expected. So set this to verified.

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1796