[lxc-devel] [PATCH (resubmit without trailing whitespace)] Replace use of chroot with pivot_root

Daniel Lezcano daniel.lezcano at free.fr
Fri Jan 8 11:31:01 UTC 2010


Michael Holzt wrote:
> Replace use of chroot with pivot_root to prevent users from breaking out
> of the chroot of a container. Adds a new config keyword 'lxc.pivotdir'
> which can optionally specify a temporary mountpoint for the pivot_root
> syscall to move the old rootfs to. If not specified, a temporary
> directory will be created in the new rootfs and used. After pivot_root
> all mounts of the old rootfs and mount of the old rootfs itself will
> be umounted before executing the container.
>
> Signed-off-by: Michael Holzt <lxc at my.fqdn.org>
> ---
>   
I already refreshed your v6 diff file, removed the trailing space, and 
commited in my tree.
Your patch spotted a memory corruption on ppc and s390 architecture in 
the configuration, we will fix it before applying your patch.

Thanks
  -- Daniel





More information about the lxc-devel mailing list