While flags SYSLOG_ACTION_CONSOLE_ON/OFF/LEVEL of console actin are used in syslog syscall, the related hanlding should be targeted at host by init_syslog_ns. Signed-off-by: Rui Xiang <rui.xiang@xxxxxxxxxx> --- kernel/printk.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/kernel/printk.c b/kernel/printk.c index c5c65a8..fd2d600 100644 --- a/kernel/printk.c +++ b/kernel/printk.c @@ -379,6 +379,11 @@ static int check_syslog_permissions(int type, bool from_file, if (from_file && type != SYSLOG_ACTION_OPEN) return 0; + if (type == SYSLOG_ACTION_CONSOLE_OFF + || type == SYSLOG_ACTION_CONSOLE_ON + || type == SYSLOG_ACTION_CONSOLE_LEVEL) + ns = &init_syslog_ns; + if (syslog_action_restricted(type, ns)) { if (ns_capable(ns->owner, CAP_SYSLOG)) return 0; -- 1.8.2.2 _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers