From: Serge Hallyn <serge.hallyn@ubuntu.com>
Date: Fri, 4 Oct 2013 15:53:21 +0000 (-0500)
Subject: lxc-fedora: remove 4:0 and 4:1 from devices whitelist
X-Git-Tag: lxc-1.0.0.alpha2~50
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fe5c5ea69323ef9558648645e08d54edd866adf6;p=thirdparty%2Flxc.git

lxc-fedora: remove 4:0 and 4:1 from devices whitelist

They are the real /dev/tty{0,1}, which are physical consoles.  Lxc
bind-mounts over them.  Don't let the container use these!

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
---

diff --git a/templates/lxc-fedora.in b/templates/lxc-fedora.in
index d40601242..484170c83 100644
--- a/templates/lxc-fedora.in
+++ b/templates/lxc-fedora.in
@@ -859,8 +859,6 @@ lxc.cgroup.devices.allow = c 1:5 rwm
 # consoles
 lxc.cgroup.devices.allow = c 5:1 rwm
 lxc.cgroup.devices.allow = c 5:0 rwm
-lxc.cgroup.devices.allow = c 4:0 rwm
-lxc.cgroup.devices.allow = c 4:1 rwm
 # /dev/{,u}random
 lxc.cgroup.devices.allow = c 1:9 rwm
 lxc.cgroup.devices.allow = c 1:8 rwm