]> git.ipfire.org Git - thirdparty/lxc.git/commit
projects / thirdparty / lxc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c2b9bd9) | patch
always check whether rootfs is shared
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Tue, 25 Feb 2014 05:08:26 +0000 (23:08 -0600)
committerStéphane Graber <stgraber@ubuntu.com>
Tue, 25 Feb 2014 16:16:08 +0000 (11:16 -0500)
commit2c6f3fc932661ad87af90f3675a9ae8c3cb9bc3f
tree345d86e780ba14c1fac419874ca857e522125c56tree
parentc2b9bd9e815d6828dc23c0e0644bc31e03c44e6ecommit | diff
always check whether rootfs is shared

(this expands on Dwight's recent patch, commit c597baa8f9)

After unshare(CLONE_NEWNS) and before doing any mounting, always
check whether rootfs is shared.  Otherwise template runs or clone
scripts can bleed mount activity to the host.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Dwight Engen <dwight.engen@oracle.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
src/lxc/attach.c diff | blob | blame | history
src/lxc/bdev.c diff | blob | blame | history
src/lxc/conf.c diff | blob | blame | history
src/lxc/lxc_usernsexec.c diff | blob | blame | history
src/lxc/lxccontainer.c diff | blob | blame | history
src/lxc/utils.c diff | blob | blame | history
src/lxc/utils.h diff | blob | blame | history
Mirror of https://github.com/lxc/lxc.git