Commits · 92deecddfc4082132a8908f66fcc282e24328074 · Chen Yisong / lxc

08 Feb, 2019 1 commit

authored Feb 08, 2019

When we are running inside of a user namespace getuid() will return a
non-zero uid. So let's check euid as well to make sure we correctly drop
capabilities
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

92deecdd

07 Jan, 2019 2 commits
- Merge pull request #2772 from brauner/2018-01-09/fix_cgroup_deletion_stable-3.0 · 4faaed33
  Stéphane Graber authored Jan 08, 2019
```
cgfsng: do not free container_full_path on error
```
  4faaed33
- cgfsng: do not free container_full_path on error · 6f8a953e
  Christian Brauner authored Jan 07, 2019
```
Closes #2741.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6f8a953e
17 Dec, 2018 2 commits

Merge pull request #2758 from Blub/2018-12-17/stable-3.0/apparmor-bind-remount · 0d585e47
Christian Brauner authored Dec 17, 2018
```
apparmor: allow various remount,bind options
```
0d585e47

apparmor: allow various remount,bind options · 1cc28d37

authored Nov 15, 2018

RW bind mounts need to be restricted for some paths in
order to avoid MAC restriction bypasses, but read-only bind
mounts shouldn't have that problem.

Additionally, combinations of 'nosuid', 'nodev' and
'noexec' flags shouldn't be a problem either and are
required with newer systemd versions, so let's allow those
as long as they're combined with 'ro,remount,bind'.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
(cherry picked from commit e6ec0a9e)

1cc28d37

22 Nov, 2018 35 commits
- Release LXC 3.0.3 · 51a9e74b
  Stéphane Graber authored Nov 22, 2018
```
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
```
  51a9e74b
- Merge pull request #2735 from brauner/lxc/stable-3.0 · 78a2a5b1
  Stéphane Graber authored Nov 22, 2018
```
start: don't call cgroup_exit() twice
```
  78a2a5b1
- start: don't call cgroup_exit() twice · b4791df3
  Christian Brauner authored Nov 22, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b4791df3
- cgfsng: remove freezer requirement · 34fcc38d
  Christian Brauner authored Nov 20, 2018
```
The freezer controller has been made optional in all other codepaths so
don't require it.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  34fcc38d
- autotools: fix lxc-{create,copy} build · d53bf098
  Radostin Stoyanov authored Nov 20, 2018
```
After commit 2b670dfe lxc-create and lxc-copy fails with "undefined
symbol: get_fssize".

Closes #2730
Signed-off-by: Radostin Stoyanov <rstoyanov1@gmail.com>
```
  d53bf098
- utils: make keyring allocation failure non-fatal · 225581d0
  Christian Brauner authored Nov 19, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  225581d0
- Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the… · ba1390c3
  tomponline authored Nov 14, 2018
```
Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the LVM subsystem asks to avoid hanging lxc-create command
Signed-off-by: tomponline <tomp@tomp.uk>
```
  ba1390c3
- utils: add errno logs for exception case · 669ffcff
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  669ffcff
- utils: fix coding styles · f00d8562
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  f00d8562
- pam_cgfs: remove dependency from cap & log · a6e61f49
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  a6e61f49
- cgfs: remove redundancy utils · bd8357e2
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  bd8357e2
- pam_cgfs: remove redundancy file utils · a64c59b2
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  a64c59b2
- conf: s/ty/tty/g · 5fb21f81
  Christian Brauner authored Nov 08, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5fb21f81
- dlog: move match_dlog_fds() · b67cc0b8
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  b67cc0b8
- log: replace write with lxc_write_nointr · 94abc19b
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  94abc19b
- caps: replace read with lxc_read_nointr · ede72830
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  ede72830
- Fix spacing error in namespace.c · 1b02aa57
  Jungsub authored Nov 06, 2018
```
Signed-off-by: Jungsub Shin supsup5642@tmax.co.kr
```
  1b02aa57
- include: correctly include macro.h · f44505e4
  Christian Brauner authored Nov 02, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f44505e4
- coverity: move to separate branch · 0166efcd
  Christian Brauner authored Nov 02, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0166efcd
- log: fix too wide or inconsistent non-owner permissions · 2d38bc85
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  2d38bc85
- string_utils: coding rules · 9e8aa57c
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  9e8aa57c
- lxcmntent: coding rules · 36c4d87a
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  36c4d87a
- spelling: without · 837a2bf6
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  837a2bf6
- spelling: userns · ddb20a15
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  ddb20a15
- spelling: unsigned · eaae553b
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  eaae553b
- spelling: timeout · d1b764d0
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  d1b764d0
- spelling: syscall · f39f8be9
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  f39f8be9
- spelling: successfully · 62a8307a
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  62a8307a
- spelling: subtracting · 69463317
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  69463317
- spelling: specify · 8ecfc43a
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  8ecfc43a
- spelling: specified · eae828d8
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  eae828d8
- spelling: snapshotting · 103fce25
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  103fce25
- spelling: securityfs · cc8c6d34
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  cc8c6d34
- spelling: root · 7843b6ad
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  7843b6ad
- spelling: returns · fd11f7ab
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  fd11f7ab