Commits · a3f3659b4e1551bf1e2bf61acfdf7bd902cec0ae · Chen Yisong / lxc

30 Sep, 2018 40 commits
- autotools: fix wrong AX_CHECK_COMPILE_FLAG test · a3f3659b
  Christian Brauner authored Sep 21, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a3f3659b
- cgroups: s/base_cgroup/container_base_path/g · 1537e2c3
  Christian Brauner authored Sep 10, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1537e2c3
- cgroups: add missing string.h include · 984dec41
  Christian Brauner authored Sep 10, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  984dec41
- cgroups: s/fullcgpath/container_full_path/g · 9f238864
  Christian Brauner authored Sep 10, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9f238864
- cgroup: rename container specific cgroup functions · 3ec9a308
  Christian Brauner authored Sep 10, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3ec9a308
- autotools: add -Wimplicit-fallthrough · a5a0ca05
  Christian Brauner authored Sep 21, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a5a0ca05
- cgfsng: mark ops with __cgfsng_ops__ attribute · d0308f0c
  Christian Brauner authored Sep 21, 2018
```
Helps to easily tell the cgfsng ops functions from helpers.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d0308f0c
- start: s/backgrounded/daemonize/g · 4bb538ce
  Christian Brauner authored Sep 21, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4bb538ce
- conf: realpath() uses null as second parameter to prevent buffer overflow · f3774012
  2xsec authored Sep 21, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  f3774012
- apparmor: account for specified rootfs path (closes #2617) · 7d9fe250
  Cameron Nemo authored Sep 20, 2018
```
Signed-off-by: Cameron Nemo <camerontnorman@gmail.com>
```
  7d9fe250
- lxccontainer: remove locks from get_cgroup_item() · c55c6a16
  Christian Brauner authored Sep 20, 2018
```
The on-disk config file is not altered and the in-memory config isn't
altered so no need for locking.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c55c6a16
- lxccontainer: remove locks from set_cgroup_item() · 2cac4304
  Christian Brauner authored Sep 20, 2018
```
The on-disk config file is not altered and the in-memory config isn't
altered so no need for locking.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2cac4304
- af_unix: add function to remove duplicated codes for set sockaddr · db894c06
  2xsec authored Sep 19, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  db894c06
- attach: report standard shell exit codes · 8397a1e6
  Christian Brauner authored Sep 19, 2018
```
POSIX mandates that on ENOEXEC 126 and on ENOENT 127 is supposed to be
reported.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8397a1e6
- security: fix too wide or inconsistent non-owner permissions · 06ff7fff
  2xsec authored Sep 19, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  06ff7fff
- attach: don't shutdown ipc socket in child · 8cf8e2e3
  Stephen Barber authored Sep 17, 2018
```
shutdown() affects sockets even across forked processes. The
attached child process doesn't have any interest in using the
IPC socket, so just close it in the child process and let the
intermediate process handle shutting it down.

This fixes a bug seen with lxc exec in crbug.com/884244
Signed-off-by: Stephen Barber <smbarber@chromium.org>
```
  8cf8e2e3
- log: add additional info of dlog · 97dd9582
  2xsec authored Sep 14, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  97dd9582
- log: add common functions · 93bf7108
  2xsec authored Sep 14, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  93bf7108
- add compile flags for dlog · aa074e3b
  2xsec authored Sep 13, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  aa074e3b
- network: minor tweaks · 7ac00919
  Christian Brauner authored Sep 13, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7ac00919
- file_utils: remove unused function · 3b462454
  2xsec authored Sep 12, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  3b462454
- remove unused variables · 490f1696
  2xsec authored Sep 12, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  490f1696
- network: add lxc_netns_get_nsid() · c4d30a97
  Christian Brauner authored Sep 11, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c4d30a97
- network: use correct type in lxc_netns_set_nsid() · b4c5f409
  Christian Brauner authored Sep 11, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b4c5f409
- conf: remove extra MS_BIND with sysfs:mixed · 27095c2a
  Christian Brauner authored Sep 11, 2018
```
The extra bind-mount is not required. To succesfully remount read-only
we just need MS_REMOUNT|MS_RDONLY.

Closes #2602.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Serge Hallyn <serge@hallyn.com>
```
  27095c2a
- lxccontainer: use correct pid_t type · 6bd905a8
  Christian Brauner authored Sep 11, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6bd905a8
- utils: make lxc_switch_uid_gid() return bool · b8287fca
  Christian Brauner authored Sep 09, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b8287fca
- utils: make lxc_setgroups() return bool · 004637bb
  Christian Brauner authored Sep 09, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  004637bb
- start: avoid unnecessary syscalls · 40dcd166
  Christian Brauner authored Sep 09, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  40dcd166
- attach: handle id switching smarter · 9991e6df
  Christian Brauner authored Sep 09, 2018
```
For setup, switch to the most privileged ids we can find. That is either
nsuid 0 if a mapping has been established if not switch to the ids the
init running in the container was started with.
After setup, switch to the actual requested ids.

Closes #2591.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9991e6df
- log: support dlog · 068720a9
  2xsec authored Sep 11, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  068720a9
- utils: improve lxc_switch_uid_gid() · d4f21b92
  Christian Brauner authored Sep 09, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d4f21b92
- utils: improve get_ns_uid() and add get_ns_gid() · 2b3062a0
  Christian Brauner authored Sep 09, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2b3062a0
- lxc: fix build with --disable-werror · 8f5dbd14
  Fabrice Fontaine authored Sep 08, 2018
```
Fix #2592 by defining -Wvla -std=gnu11 even if --disable-werror is set
As -std=gnu11 is always set, bump requirement on gcc from 4.6 to 4.7
(see https://gcc.gnu.org/projects/cxx-status.html#cxx11)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
```
  8f5dbd14
- lxccontainer: fix dereferenced pointer · 7a6e1cce
  2xsec authored Sep 06, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  7a6e1cce
- log: log_append_logfile() add new error path · 17dd7e6e
  Christian Brauner authored Sep 04, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  17dd7e6e
- nl: save errno on lxc_netns_set_nsid() · eed8c0ad
  Christian Brauner authored Sep 03, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  eed8c0ad
- tree-wide: s/send()/lxc_send_nointr()/g · cc3c6011
  Christian Brauner authored Sep 03, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cc3c6011
- file_utils: add lxc_send_nointr() · 712eb803
  Christian Brauner authored Sep 03, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  712eb803
- tree-wide: s/recv()/lxc_recv_nointr()/g · d07aa0ec
  Christian Brauner authored Sep 03, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d07aa0ec