[lxc-devel] [PATCH] lxc-alpine: allow /dev/full
Serge Hallyn
serge.hallyn at ubuntu.com
Tue Oct 22 16:26:20 UTC 2013
Quoting Natanael Copa (ncopa at alpinelinux.org):
> The template creates /dev/full for the container but needs also give
> permission to access it.
>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>
> Signed-off-by: Natanael Copa <ncopa at alpinelinux.org>
> ---
> templates/lxc-alpine.in | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/templates/lxc-alpine.in b/templates/lxc-alpine.in
> index 5fdf36f..8600a34 100644
> --- a/templates/lxc-alpine.in
> +++ b/templates/lxc-alpine.in
> @@ -197,9 +197,10 @@ lxc.cap.drop = sys_module mac_admin mac_override sys_time
>
> # devices
> lxc.cgroup.devices.deny = a
> -# /dev/null and zero
> +# /dev/null, zero and full
> lxc.cgroup.devices.allow = c 1:3 rwm
> lxc.cgroup.devices.allow = c 1:5 rwm
> +lxc.cgroup.devices.allow = c 1:7 rwm
> # consoles
> lxc.cgroup.devices.allow = c 5:1 rwm
> lxc.cgroup.devices.allow = c 5:0 rwm
> --
> 1.8.4.1
>
>
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
> _______________________________________________
> Lxc-devel mailing list
> Lxc-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/lxc-devel
More information about the lxc-devel
mailing list