[lxc-devel] [lxc/lxc] b2fe91: apparmor: don't do on-exec profile changes

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: b2fe91c7d4e9dd26903dca9801a32a03a65bd2a4
      https://github.com/lxc/lxc/commit/b2fe91c7d4e9dd26903dca9801a32a03a65bd2a4
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-02-22 (Sat, 22 Feb 2014)

  Changed paths:
    M src/lxc/lsm/apparmor.c

  Log Message:
  -----------
  apparmor: don't do on-exec profile changes

always change profile immediately.  Otherwise there are weird
corner cases where the profile change may not happen.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>


  Commit: 7bb878863c0e76bddb0bb062234c2ae1e4b3fb06
      https://github.com/lxc/lxc/commit/7bb878863c0e76bddb0bb062234c2ae1e4b3fb06
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-02-22 (Sat, 22 Feb 2014)

  Changed paths:
    M src/lxc/bdev.c
    M src/lxc/bdev.h
    M src/lxc/lxc_create.c

  Log Message:
  -----------
  add dir support

It used to be supported with the lxc-create.in script, and
the manpage says it's supported...  So let's just support it.

Now

sudo lxc-create -t download --dir /opt/ab -n ab

works, creating the container rootfs under /opt/ab.  This
generally isn't something I'd recommend, however telling users
to use a different lxc-path isn't as friendly as I'd like,
because each lxcpath requires separate lxc-ls and lxc-autostart
runs.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/223b1e0c8741...7bb878863c0e