]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4fc4f66) | patch
lxc: set nosuid+nodev+noexec flags on /proc/sys mount
authorEric W. Biederman <ebiederm@xmission.com>
Tue, 16 Jun 2015 13:44:36 +0000 (14:44 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Tue, 16 Jun 2015 16:21:59 +0000 (17:21 +0100)
commit4ecffe773d2438ce99ab2dfed07b4c7994091114
tree751062b5a973cf790c20a35ccbc6783d781ae87etree | snapshot
parent4fc4f669eb6a1d776b917d410b6db46e09b6feedcommit | diff
lxc: set nosuid+nodev+noexec flags on /proc/sys mount

Future kernels will mandate the use of nosuid+nodev+noexec
flags when mounting the /proc/sys filesystem. Unconditionally
add them now since they don't harm things regardless and could
mitigate future security attacks.

(cherry picked from commit 24710414d403f1040794299f5304fee160d0fc23)

Conflicts:
    src/lxc/lxc_container.c
src/lxc/lxc_container.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git