Compiler based hardening (including -fstack-protector-strong) are
enabled since version 3.0.3 and
https://github.com/lxc/lxc/commit/2268c27754152aa538db2c9e3753d72d19bcd17a

However, some compilers could missed the needed library (-lssp or
-lssp_nonshared) at linking step so use ax_check_link_flag instead of
ax_check_compile_flag

Fixes:
 - http://autobuild.buildroot.org/results/0b90e7dca2984652842832a41abad93ac49a9b86Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

stringutils: include stdarg for va_list

Fixes:
 - http://autobuild.buildroot.org/results/0b90e7dca2984652842832a41abad93ac49a9b86Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

fix install error when using --disable-commands option

lxc-usernsexec: fix default map functionality

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

* Place NULL bytes at the end of strings so that
  lxc_safe_ulong() can parse them correctly

* Only free the newly created id_map on error,
  to avoid passing garbage to lxc_map_ids()
Signed-off-by: Cameron Nemo <camerontnorman@gmail.com>

Add allowrunning option into Japanese lxc-copy(1)

Update for commit 754076f5Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>

doc: Add -a, --allowrunning arg to Korean lxc-copy(1)

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Added allowrunning command line option for snapshotting running containers

cgfsng: remove freezer requirement

The freezer controller has been made optional in all other codepaths so
don't require it.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

autotools: fix lxc-{create,copy} build

After commit 2b670dfe lxc-create and lxc-copy fails with "undefined
symbol: get_fssize".

Closes #2730
Signed-off-by: Radostin Stoyanov <rstoyanov1@gmail.com>

utils: make keyring allocation failure non-fatal

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

apparmor: allow various remount,bind options

RW bind mounts need to be restricted for some paths in
order to avoid MAC restriction bypasses, but read-only bind
mounts shouldn't have that problem.

Additionally, combinations of 'nosuid', 'nodev' and
'noexec' flags shouldn't be a problem either and are
required with newer systemd versions, so let's allow those
as long as they're combined with 'ro,remount,bind'.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

Adds -qq flags to lvcreate commands

Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the LVM subsystem asks to avoid hanging lxc-create command
Signed-off-by: tomponline <tomp@tomp.uk>

pam_cgfs: remove dependency & redundancy functions

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

conf: s/ty/tty/g

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

replace read & write syscalls with nointr functions

dlog: move match_dlog_fds()

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Fix spacing error in namespace.c

Signed-off-by: Jungsub Shin supsup5642@tmax.co.kr

include: correctly include macro.h

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>