]> git.ipfire.org Git - thirdparty/lxc.git/commit
projects / thirdparty / lxc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 821b049) | patch
always check whether rootfs is shared
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Tue, 25 Feb 2014 05:08:26 +0000 (23:08 -0600)
committerStéphane Graber <stgraber@ubuntu.com>
Tue, 25 Feb 2014 21:18:16 +0000 (16:18 -0500)
commite5a5ff0093c19254e1a96e3ac8a982ce6187275d
tree345d86e780ba14c1fac419874ca857e522125c56tree
parent821b0499a0bcb393a0e83725194ec041d2d71dd0commit | diff
always check whether rootfs is shared

(this expands on Dwight's recent patch, commit c597baa8f9)

After unshare(CLONE_NEWNS) and before doing any mounting, always
check whether rootfs is shared.  Otherwise template runs or clone
scripts can bleed mount activity to the host.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Dwight Engen <dwight.engen@oracle.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
src/lxc/attach.c diff | blob | blame | history
src/lxc/bdev.c diff | blob | blame | history
src/lxc/conf.c diff | blob | blame | history
src/lxc/lxc_usernsexec.c diff | blob | blame | history
src/lxc/lxccontainer.c diff | blob | blame | history
src/lxc/utils.c diff | blob | blame | history
src/lxc/utils.h diff | blob | blame | history
Mirror of https://github.com/lxc/lxc.git