- 02 Nov, 2020 3 commits
-
-
Stéphane Graber authored
seccomp: fixes
-
Christian Brauner authored
Suggested-by:
Jann Horn <jann@thejh.net> Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Suggested-by:
Jann Horn <jann@thejh.net> Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
- 28 Oct, 2020 6 commits
-
-
Stéphane Graber authored
coverity fixes
-
Christian Brauner authored
to avoid liblxc stumbling over an smaller struct passed in from an older liblxc. In the future we should version by size but this requires a new attach2(). Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: Coverity 1465853 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: Coverity 1465854 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: Coverity 1465855 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: Coverity 1465657 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 27 Oct, 2020 11 commits
-
-
Christian Brauner authored
lxc-attach: Enable setting the SELinux context
-
Christian Brauner authored
cgroups: Introduce lxc.cgroup.dir.monitor.pivot - fixes cgroup removal on termination
-
Christian Brauner authored
seccomp: fix pseudo syscalls, improve logging and avoid duplicate processing
-
Christian Brauner authored
tests: Fix compilation with appamor enabled.
-
Christian Brauner authored
lxccontainer: fix lxc_config_item_is_supported
-
Maximilian Blenk authored
Enable lxc-attach to set the SELinux context that the user will end up in when attaching to a container (This can be used to overwrite the context set in the config file). If the option is not used, behavior will be as before Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
Ruben Jenster authored
Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
Ruben Jenster authored
Use exact match instead of longest prefix match to check whether a config item is supported. Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
Ruben Jenster authored
On termination lxc may fail to remove either lxc.cgroup.dir or lxc.cgroup.dir.monitor, because the monitor process may still be a member of either of these cgroups. The pivot cgroup should not be a member (subpath) of any other container cgroup (dir). because only empty cgroups can be removed. Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
Ruben Jenster authored
Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
Ruben Jenster authored
Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
- 24 Oct, 2020 2 commits
-
-
Stéphane Graber authored
Update Japanese pam_cgfs(8) to reflect lack of support for pure cgroupv2
-
KATOH Yasufumi authored
Update for commit b87ed83bSigned-off-by:
KATOH Yasufumi <karma@jazz.email.ne.jp>
-
- 20 Oct, 2020 4 commits
-
-
Stéphane Graber authored
conf: account for early return when sending devpts fd
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Stéphane Graber authored
conf: always send response to parent waiting for devptfs_fd
-
Christian Brauner authored
When no devpts devices are requested we used to return early but did not send a response to the parent. This is a problem because the parent will be waiting for a devpts fd to be sent. Make sure to always send a response. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 19 Oct, 2020 4 commits
-
-
Stéphane Graber authored
startup fixes
-
Christian Brauner authored
Closes: #3549. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 16 Oct, 2020 2 commits
-
-
Stéphane Graber authored
seccomp: fix compilation on powerpc
-
- 15 Oct, 2020 3 commits
-
-
Wolfgang Bumiller authored
seccomp: bugfixes
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 13 Oct, 2020 2 commits
-
-
Christian Brauner authored
seccomp: Check if syscall is supported on compat architecture.
-
Ruben Jenster authored
Signed-off-by:Ruben Jenster <r.jenster@drachenfels.de>
-
- 23 Sep, 2020 2 commits
-
-
Stéphane Graber authored
Remove obsolete setting regarding the Standard Output
-
Mingli Yu authored
The Standard output type "syslog" is obsolete, causing a warning since systemd version 246 [1]. Please consider using "journal" or "journal+console" [1] https://github.com/systemd/systemd/blob/master/NEWS#L202Signed-off-by:
Mingli Yu <mingli.yu@windriver.com>
-
- 17 Sep, 2020 1 commit
-
-
Stéphane Graber authored
lxc-usernsexec: setgroups() similar to other places shouldn't fail on…
-