- 10 May, 2017 4 commits
-
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 09 May, 2017 14 commits
-
-
0x0916 authored
Signed-off-by:0x0916 <w@laoqinren.net>
-
Evgeni Golov authored
-
Christian Brauner authored
Older version of liblxc only allowed for 105 bytes to be used for the abstract unix domain socket name because the code for our abstract unix socket handling performed invalid checks. Since we \0-terminate we could now have a maximum of 106 chars. But do not break backwards compatibility we keep the limit at 105. Reported-by: 0x0916 w@laoqinren.net Signed-off-by: -
Christian Brauner authored
In case the lxc command socket is hashed and the socket was created for a different path than the one we're currently querying lxc_cmd_get_{lxcpath,name}() can return NULL. The command socket path is hashed when len(lxcpath) > sizeof(sun_path) - 2. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
lxc_cmd_get_lxcpath() and lxc_cmd_get_name() both pass a nil pointer to fill_sock_name(). Make sure that they are not dereferenced. Signed-off-by: -
Christian Brauner authored
Abstract unix sockets need not be \0-terminated. So you can effectively have 107 chars available. If you \0-terminate you'll have a 106. Don't enforce \0-termination in these low-level functions. Enforce it higher up which we already do. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Nikolay Martynov authored
A few things have changed and this patch makes container generated for sshd work in Ubuntu Signed-off-by:Nikolay Martynov <mar.kolya@gmail.com>
-
Christian Brauner authored
Create /proc directory if it doesn't exist. Closes #1475. Signed-off-by: -
Christian Brauner authored
Closes #1475. Signed-off-by: -
Christian Brauner authored
This left the file descriptor to the underlying /dev/ptmx file open which confused the hell out of criu. Let's close it. Closes https://github.com/lxc/lxd/issues/3243. Signed-off-by:
-
- 26 Apr, 2017 7 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
In a lot of cases we need a list of the writeable cgroup controllers detected by the cgfsng driver. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Use the loop device helpers I wrote for LXD in LXC as well. They should be more efficient. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
AppArmor will refuse on /dev/ptmx being a symlink. Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 19 Apr, 2017 2 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 18 Apr, 2017 3 commits
-
-
Christian Brauner authored
Signed-off-by: -
0x0916 authored
Signed-off-by: -
Evgeni Golov authored
Signed-off-by:Evgeni Golov <evgeni@debian.org>
-
- 17 Apr, 2017 6 commits
-
-
0x0916 authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
The new{g,u}idmap binaries where a source of trouble for users when they lacked sufficient privileges. This commit adds code to check for sufficient privilege. It checks whether new{g,u}idmap is root owned and has the setuid bit set and if it doesn't it checks whether new{g,u}idmap is root owned and has CAP_SETUID in its CAP_PERMITTED and CAP_EFFECTIVE set. Closes #296. Signed-off-by: -
Christian Brauner authored
Add two new helpers that allow to determine whether a given proc or file has a capability in the given set and move lxc_cap_is_set() to static function that both call internally. Closes #296. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Wolfgang Bumiller authored
These functions define pointer to their key shifted by a number and guard access to it later via another variable. Let's make this more explicit (and additionally have the pointer be NULL in the case where it is not supposed to be used). Signed-off-by:Wolfgang Bumiller <w.bumiller@proxmox.com>
-
- 10 Apr, 2017 2 commits
-
-
Jakob Gillich authored
Signed-off-by:Jakob Gillich <jakob@gillich.me>
-
Vincent Catros authored
Signed-off-by:Vincent Catros <vincent.catros@laposte.net>
-
- 04 Apr, 2017 2 commits
-
-
Denis Pynkin authored
Some "/sys" entries exceeds buffer size. This results to some statistics loss ('BlkIO' in particular): wc -c /sys/fs/cgroup/blkio/lxc/alt/blkio.throttle.io_service_bytes 318 /sys/fs/cgroup/blkio/lxc/alt/blkio.throttle.io_service_bytes Signed-off-by:Denis Pynkin <dans@altlinux.org>
-
Torsten Fohrer authored
Signed-off-by:Torsten Fohrer <tfohrer@googlemail.com>
-
