[lxc-devel] LXC security issue - affects all supported releases

[Wolfgang Bumiller]

O_PATH should be optional, openat() should work without it, too. It's mostly an
optimization.
I have it in my stop-hook patch series, too, so whatever you choose to do here
I'll also
do the same when I send v3.

Perhaps it's enough to
#ifndef O_PATH
# define O_PATH 0
#endif

> On October 2, 2015 at 10:04 AM Thomas Moschny <thomas.moschny at gmail.com>
> wrote:
> 
> 
> Hi,
> 
> the patch unfortunately doesn't work on RHEL/CentOS 6, as it uses the
> O_PATH flag for openat(), which is supported only for kernels >=
> 2.6.39, afaict.
> Is there a workaround?
> 
> Regards,
> Thomas
> _______________________________________________
> lxc-devel mailing list
> lxc-devel at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-devel