[lxc-devel] [lxc/lxc] 1b0c17: apparmor: support lxc.ttydir when bind-mounting pt...

GitHub noreply at github.com
Fri Jan 30 00:02:09 UTC 2015


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 1b0c17462ad4f9a05ea6e5ced5e444152ec7a193
      https://github.com/lxc/lxc/commit/1b0c17462ad4f9a05ea6e5ced5e444152ec7a193
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2015-01-30 (Fri, 30 Jan 2015)

  Changed paths:
    M config/apparmor/abstractions/start-container

  Log Message:
  -----------
  apparmor: support lxc.ttydir when bind-mounting ptys

Because we now create the ttys from inside the container, we had to
add an apparmor rule for start-container to bind-mount /dev/pts/** -> /dev/tty*/.
However that's not sufficient if the container sets lxc.ttydir, in
which case we need to support mounting onto files in subdirs of /dev.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>




More information about the lxc-devel mailing list