conf: allow cross-device links

Fixes: https://github.com/lxc/lxd/issues/10914
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index a04bb0de8e507daab699d3b389bf5648901ae04a..bc1b254642110cbce8c90277ba977d2da53813ec 100644 (file)
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -3041,7 +3041,7 @@ static int __lxc_idmapped_mounts_child(struct lxc_handler *handler, FILE *f)
                        dfd_from = rootfs->dfd_mnt;
                else
                        dfd_from = rootfs->dfd_host;
-               fd_to = open_at(dfd_from, target_relative, PROTECT_OPATH_FILE, PROTECT_LOOKUP_BENEATH_WITH_SYMLINKS, 0);
+               fd_to = open_at(dfd_from, target_relative, PROTECT_OPATH_FILE, PROTECT_LOOKUP_BENEATH_XDEV, 0);
                if (fd_to < 0) {
                        if (opts.optional) {
                                TRACE("Skipping optional idmapped mount");