]> git.ipfire.org Git - thirdparty/lxc.git/commit
apparmor: support lxc.ttydir when bind-mounting ptys
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Thu, 29 Jan 2015 23:50:41 +0000 (23:50 +0000)
committerStéphane Graber <stgraber@ubuntu.com>
Fri, 30 Jan 2015 00:02:06 +0000 (01:02 +0100)
commit1b0c17462ad4f9a05ea6e5ced5e444152ec7a193
treea5a7afbde008e8ba7c715447e098585cfff2fb31
parentae0aeadeaab6b2535952dd699efdf889c4f7464f
apparmor: support lxc.ttydir when bind-mounting ptys

Because we now create the ttys from inside the container, we had to
add an apparmor rule for start-container to bind-mount /dev/pts/** -> /dev/tty*/.
However that's not sufficient if the container sets lxc.ttydir, in
which case we need to support mounting onto files in subdirs of /dev.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
config/apparmor/abstractions/start-container