[lxc-devel] [lxc/lxc] b1710c: commands: fix check for seccomp notify support

[Christian Brauner]

  Branch: refs/heads/stable-4.0
  Home:   https://github.com/lxc/lxc
  Commit: b1710cdb0378b998055a88e9b439a9c9d1577973
      https://github.com/lxc/lxc/commit/b1710cdb0378b998055a88e9b439a9c9d1577973
  Author: Eneas U de Queiroz <cotequeiroz at gmail.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M src/lxc/commands.c

  Log Message:
  -----------
  commands: fix check for seccomp notify support

Use HAVE_SECCOMP_NOTIFY instead of HAVE_DECL_SECCOMP_NOTIFY_FD.
Currently the latter will be true if the declaration is found by
configure, even if 'configure --disable-seccomp' is used.

HAVE_SECCOMP_NOTIFY is defined in lxcseccomp.h if both HAVE_SECCOMP and
HAVE_DECL_SECCOMP_NOTIFY_FD are true, which is the correct behavior.

Signed-off-by: Eneas U de Queiroz <cotequeiroz at gmail.com>


  Commit: 9d6a3de70086d46f7562ac689d10ca1e36b237a1
      https://github.com/lxc/lxc/commit/9d6a3de70086d46f7562ac689d10ca1e36b237a1
  Author: Eneas U de Queiroz <cotequeiroz at gmail.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  configure: skip libseccomp tests if it is disabled

Move the block checking for libseccomp api compatibility inside
AM_COND_IF([ENABLE_SECCOMP] ... ).

Signed-off-by: Eneas U de Queiroz <cotequeiroz at gmail.com>


  Commit: 563ec46266b8967f0ee60e0032bbe66b3b37207c
      https://github.com/lxc/lxc/commit/563ec46266b8967f0ee60e0032bbe66b3b37207c
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c
    M src/lxc/conf.c
    M src/lxc/conf.h

  Log Message:
  -----------
  conf: fix containers retaining CAP_NET_ADMIN

Fixes: #3627
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 5a13595b7bc3db36e3f0cdf6f03758591a019d93
      https://github.com/lxc/lxc/commit/5a13595b7bc3db36e3f0cdf6f03758591a019d93
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c
    M src/lxc/cgroups/cgroup.h
    M src/lxc/utils.c

  Log Message:
  -----------
  cgroups: fix cgroup mounting

Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 93ce8339d91c9684b739cd65b8b97e9d24ab1371
      https://github.com/lxc/lxc/commit/93ce8339d91c9684b739cd65b8b97e9d24ab1371
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M src/lxc/lsm/apparmor.c

  Log Message:
  -----------
  lsm: remove obsolute comment about constructor

Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 027f9f8225874b683d70d1ebcce4ae8682522e65
      https://github.com/lxc/lxc/commit/027f9f8225874b683d70d1ebcce4ae8682522e65
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-22 (Fri, 22 Jan 2021)

  Changed paths:
    M src/lxc/tools/lxc_attach.c

  Log Message:
  -----------
  lxc_attach: include rexec conditionally

Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/1048d5e1f639...027f9f822587