[lxc-devel] [lxc/lxc] 58e0f5: support get_config_item(lxc.seccomp) and clear_con...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 58e0f57da4daa5f41a0402916bce139fd49f9b80
      https://github.com/lxc/lxc/commit/58e0f57da4daa5f41a0402916bce139fd49f9b80
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-02-17 (Mon, 17 Feb 2014)

  Changed paths:
    M src/lxc/confile.c

  Log Message:
  -----------
  support get_config_item(lxc.seccomp) and clear_config_item(lxc.seccomp)

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>


  Commit: 2c4ea790e3f947626cf169d45fbb9d8733041295
      https://github.com/lxc/lxc/commit/2c4ea790e3f947626cf169d45fbb9d8733041295
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-02-17 (Mon, 17 Feb 2014)

  Changed paths:
    M src/lxc/attach.c
    M src/lxc/attach.h

  Log Message:
  -----------
  attach: try to use the container's seccomp policy

We can't get the actual policy (in the case where the policy file
has changed) from the container, but at least we can use the
seccomp policy file listed in the container config file.

(If anyone wants to further improve this, it may be better to get
the seccomp policy over the cmd api;  not sure that's what we want,
and this seems simpler to hook into the existing code, so I went
this way for now)

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/f74e080cf75f...2c4ea790e3f9