[lxc-users] LXC security issue - affects all supported releases

[Fajar A. Nugraha]

On Wed, Sep 30, 2015 at 2:24 PM, Timotheus Pokorra <timotheus at pokorra.de> wrote:
> Unfortunately, now I cannot start a container anymore, which does have a mount.
> It is not using symbolic links, as far as I can see.
> In the config file, I have this line:
> lxc.mount.entry =
> /var/lib/repocache/57/debian/jessie/amd64/var/cache/apt
> /var/lib/lxc/57-jessiestable.kolab.pokorra.de/rootfs/var/cache/apt
> none defaults,bind 0 0
>
> But lxc-start -n shows me this error:

Does changing into this help?

lxc.mount.entry =
/var/lib/repocache/57/debian/jessie/amd64/var/cache/apt
var/cache/apt
none defaults,bind 0 0

In other words, use relative path for the destination

-- 
Fajar