]> git.ipfire.org Git - thirdparty/lxc.git/commit
projects / thirdparty / lxc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7aff4f4) | patch
apparmor: make sure sysfs and securityfs are mounted when checking for mount feature
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Sat, 20 Sep 2014 04:54:32 +0000 (04:54 +0000)
committerStéphane Graber <stgraber@ubuntu.com>
Mon, 22 Sep 2014 21:28:27 +0000 (17:28 -0400)
commit85108024bda372e0bbdae9dc1858948987947ef7
tree721fc8fc451e3482139857d0b1e33ba70ec6ff45tree
parent7aff4f43fd84b021db12b2ffed1a4aa1b4cf65efcommit | diff
apparmor: make sure sysfs and securityfs are mounted when checking for mount feature

Otherwise the check will return false if securityfs was not mounted
by the container's configuration.  In the past we let that quietly
proceed, but unconfined.  Now that we restrict such container
starts, this caused lxc-test-apparmor to fail.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Dwight Engen <dwight.engen@oracle.com>
src/lxc/lsm/apparmor.c diff | blob | blame | history
Mirror of https://github.com/lxc/lxc.git