[lxc-devel] [lxc/lxc] 2c6f3f: always check whether rootfs is shared

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 2c6f3fc932661ad87af90f3675a9ae8c3cb9bc3f
      https://github.com/lxc/lxc/commit/2c6f3fc932661ad87af90f3675a9ae8c3cb9bc3f
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-02-25 (Tue, 25 Feb 2014)

  Changed paths:
    M src/lxc/attach.c
    M src/lxc/bdev.c
    M src/lxc/conf.c
    M src/lxc/lxc_usernsexec.c
    M src/lxc/lxccontainer.c
    M src/lxc/utils.c
    M src/lxc/utils.h

  Log Message:
  -----------
  always check whether rootfs is shared

(this expands on Dwight's recent patch, commit c597baa8f9)

After unshare(CLONE_NEWNS) and before doing any mounting, always
check whether rootfs is shared.  Otherwise template runs or clone
scripts can bleed mount activity to the host.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Dwight Engen <dwight.engen at oracle.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>