[lxc-devel] fixing restoring of tty mode after lxc-start

Cedric Le Goater legoater at free.fr
Mon Nov 23 07:07:08 UTC 2009


> It makes good sense to close all fds in a _child_ spawned by lxc_start(),
> to not leak unrelated filedescriptors into the container (it may even be
> a security hole).  But for _that_ task, easier and simpler solution may
> be proposed instead - if you want to loop over /proc/$pid/fd/, it can
> be done inside lxc_spawn() right after spawning the to-be-init process,
> without remembering any lists and the like.

This is the way to go. +1

> But I repeat myself.

he, thanks for doing it ! 

Cheers,

C.




More information about the lxc-devel mailing list