Re: [PATCHv3] lxc: give RW access to /proc/sys/net/ipv[46] to containers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 10.12.2014 10:40, Cédric Bosdonnat wrote:
Some programs want to change some values for the network interfaces
configuration in /proc/sys/net/ipv[46] folders. Giving RW access on them
allows wicked to work on openSUSE 13.2+.

Reusing the lxcNeedNetworkNamespace function to tell
lxcContainerMountBasicFS if the netns is disabled. When no netns is
set up, then we don't mount the /proc/sys/net/ipv[46] folder RW as
these would provide full access to the host NICs config.
---
  Diff to v2:
    * mount from /.oldroot as suggested by Dan... removed the whole temporary
      mount related code as it turned out useless.

  src/lxc/lxc_container.c | 64 +++++++++++++++++++++++++++++++------------------
  1 file changed, 41 insertions(+), 23 deletions(-)

ACK and I think it's safe to push even during freeze.

Michal

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list





[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]