- 15 Dec, 2017 40 commits
-
-
Marcos Paulo de Souza authored
Change conf.c to export function write_id_mapping, which will now be called inside main function of lxc_unshare.c. This is required because setuid syscalls only permits a new userns to set a new uid if the uid of parameter is mapped inside the ns using uid_map file[1]. So, just after the clone invocation, map the uid passed as parameter into the newly created user namespace, and put the current uid as the ID-outside-ns. After the mapping is done, setuid call succeeds. Closes: #494 [1] https://elixir.free-electrons.com/linux/latest/source/kernel/user_namespace.c#L286Signed-off-by:
Marcos Paulo de Souza <marcos.souza.org@gmail.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Felix Abecassis authored
In addition to the memory corruption fixed in ee3e84df, this function was also performing invalid memory accesses for the following inputs: - `lxc.net` - `lxc.net.` - `lxc.net.0.` - `lxc.network` - `lxc.network.0.` Signed-off-by:
Felix Abecassis <fabecassis@nvidia.com>
-
Felix Abecassis authored
This prevent an infinite recursion in the case of "lxc.net.0. = a" Signed-off-by:Felix Abecassis <fabecassis@nvidia.com>
-
Felix Abecassis authored
This caused the linked list of appenders to loop on itself, creating an infinite logging loop in `__lxc_log_append`. Signed-off-by:Felix Abecassis <fabecassis@nvidia.com>
-
Felix Abecassis authored
Signed-off-by:Felix Abecassis <fabecassis@nvidia.com>
-
Felix Abecassis authored
Signed-off-by:Felix Abecassis <fabecassis@nvidia.com>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:
AustinReichert <austinskyreichert@utexas.edu> Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
Christian Brauner authored
Closes #1956. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
This was made necessary by changes to the overlay driver. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
This is beneficial for LXD as well. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
The configuration file parser now already detects the storage type so spare the work and pass it down to the storage drivers. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Split lxc.rootfs.path = <storage type>:<container path> into <storage-type> and <container path> to set the storage type and rootfs path value correctly. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
Christian Brauner authored
Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by:
Adrian Reber <areber@redhat.com>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-
AustinReichert authored
Signed-off-by:AustinReichert <austinskyreichert@utexas.edu>
-