From: Natanael Copa Date: Tue, 22 Oct 2013 11:23:31 +0000 (+0200) Subject: lxc-alpine: allow /dev/full X-Git-Tag: lxc-1.0.0.alpha3~78 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6bd3f98c469f311f6afbffbb3586efddae3c4eb4;p=thirdparty%2Flxc.git lxc-alpine: allow /dev/full The template creates /dev/full for the container but needs also give permission to access it. Signed-off-by: Natanael Copa Signed-off-by: Serge Hallyn --- diff --git a/templates/lxc-alpine.in b/templates/lxc-alpine.in index 5fdf36f75..8600a34ce 100644 --- a/templates/lxc-alpine.in +++ b/templates/lxc-alpine.in @@ -197,9 +197,10 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time # devices lxc.cgroup.devices.deny = a -# /dev/null and zero +# /dev/null, zero and full lxc.cgroup.devices.allow = c 1:3 rwm lxc.cgroup.devices.allow = c 1:5 rwm +lxc.cgroup.devices.allow = c 1:7 rwm # consoles lxc.cgroup.devices.allow = c 5:1 rwm lxc.cgroup.devices.allow = c 5:0 rwm