From: Serge Hallyn <serge.hallyn@canonical.com>
Date: Mon, 23 Jan 2012 17:59:56 +0000 (-0600)
Subject: lxc-ubuntu: add /dev/full, /dev/hpet, and /dev/kvm to devices whitelist
X-Git-Tag: lxc-0.8.0-rc2~36
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2407e68ef2a1bc26323334a3249bdd64337ccd91;p=thirdparty%2Flxc.git

lxc-ubuntu: add /dev/full, /dev/hpet, and /dev/kvm to devices whitelist

Thanks for Scott Moser for these, which allows qemu to run inside a container.

Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
---

diff --git a/templates/lxc-ubuntu.in b/templates/lxc-ubuntu.in
index ba601edc5..d7e9b8cf3 100644
--- a/templates/lxc-ubuntu.in
+++ b/templates/lxc-ubuntu.in
@@ -231,6 +231,12 @@ lxc.cgroup.devices.allow = c 254:0 rwm
 lxc.cgroup.devices.allow = c 10:229 rwm
 #tun
 lxc.cgroup.devices.allow = c 10:200 rwm
+#full
+lxc.cgroup.devices.allow = c 1:7 rwm
+#hpet
+lxc.cgroup.devices.allow = c 10:228 rwm
+#kvm
+lxc.cgroup.devices.allow = c 10:232 rwm
 EOF
 
     cat <<EOF > $path/fstab