[lxc-devel] fixing restoring of tty mode after lxc-start
Cedric Le Goater
legoater at free.fr
Mon Nov 23 07:07:08 UTC 2009
> It makes good sense to close all fds in a _child_ spawned by lxc_start(),
> to not leak unrelated filedescriptors into the container (it may even be
> a security hole). But for _that_ task, easier and simpler solution may
> be proposed instead - if you want to loop over /proc/$pid/fd/, it can
> be done inside lxc_spawn() right after spawning the to-be-init process,
> without remembering any lists and the like.
This is the way to go. +1
> But I repeat myself.
he, thanks for doing it !
Cheers,
C.
More information about the lxc-devel
mailing list