]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Linux Containers are not allowed to create device nodes.
authorDan Walsh <dwalsh@redhat.com>
Thu, 1 Nov 2012 18:54:39 +0000 (14:54 -0400)
committerEric Blake <eblake@redhat.com>
Thu, 1 Nov 2012 21:14:25 +0000 (15:14 -0600)
commit2e03b08ead603c38c244aa9a1ecef6d73bb306be
tree55aa9ac6ad568d9cce8125f434863b0d2007ba07
parent23d47b33a2f8b524c32d556d6d55a7ccb0c5903a
Linux Containers are not allowed to create device nodes.

This needs to be done before the container starts. Turning
off the mknod capability is noticed by systemd, which will
no longer attempt to create device nodes.

This eliminates SELinux AVC messages and ugly failure messages in the journal.
src/lxc/lxc_container.c