]> git.ipfire.org Git - thirdparty/libvirt.git/commit
qemuDomainBuildNamespace: Populate basic /dev from daemon's namespace
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 21 Jul 2020 15:13:11 +0000 (17:13 +0200)
committerMichal Privoznik <mprivozn@redhat.com>
Mon, 3 Aug 2020 17:40:36 +0000 (19:40 +0200)
commit9048dc4e627ddf33996084167bece7b5fb83b0bc
treef1440125e4583f0cc94eca52c417ae3696b21e13
parent8da362fe62766b4eee209cd3ce591ceb62299d13
qemuDomainBuildNamespace: Populate basic /dev from daemon's namespace

As mentioned in previous commit, populating domain's namespace
from pre-exec() hook is dangerous. This commit moves population
of the namespace with basic /dev nodes (e.g. /dev/null, /dev/kvm,
etc.) into daemon's namespace.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/qemu/qemu_namespace.c
src/qemu/qemu_namespace.h
src/qemu/qemu_process.c