[lxc-devel] [lxc/lxc] 7987ed: apparmor: Allow slave bind mounts

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 7987eddb9f916b67110fb2d04470bed10022f67f
      https://github.com/lxc/lxc/commit/7987eddb9f916b67110fb2d04470bed10022f67f
  Author: Martin Pitt <martin.pitt at ubuntu.com>
  Date:   2014-07-30 (Wed, 30 Jul 2014)

  Changed paths:
    M config/apparmor/abstractions/start-container

  Log Message:
  -----------
  apparmor: Allow slave bind mounts

Without this, if the system uses shared subtrees by default (like systemd), you
get a large stream of

  lxc-start: Permission denied - Failed to make /<mountpoint> rslave
  lxc-start: Continuing...

with

  apparmor="DENIED" operation="mount" info="failed flags match" error=-13
  profile="/usr/bin/lxc-start" name="/" pid=17284 comm="lxc-start" flags="rw, slave"

and eventual failure plus a lot of leftover mounts in the host.

https://launchpad.net/bugs/1325468


  Commit: b1814e1c69181fc1e1ef26ec82617109853f82f5
      https://github.com/lxc/lxc/commit/b1814e1c69181fc1e1ef26ec82617109853f82f5
  Author: hallyn <serge at hallyn.com>
  Date:   2014-07-30 (Wed, 30 Jul 2014)

  Changed paths:
    M config/apparmor/abstractions/start-container

  Log Message:
  -----------
  Merge pull request #285 from martinpitt/master

apparmor: Allow slave bind mounts


Compare: https://github.com/lxc/lxc/compare/04cda6d1d34e...b1814e1c6918