Commits · e6ec0a9e71aa68c9fd67c691a62aaae87e356cef · Chen Yisong / lxc

16 Nov, 2018 1 commit

apparmor: allow various remount,bind options · e6ec0a9e

authored Nov 15, 2018

RW bind mounts need to be restricted for some paths in
order to avoid MAC restriction bypasses, but read-only bind
mounts shouldn't have that problem.

Additionally, combinations of 'nosuid', 'nodev' and
'noexec' flags shouldn't be a problem either and are
required with newer systemd versions, so let's allow those
as long as they're combined with 'ro,remount,bind'.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

e6ec0a9e

15 Nov, 2018 2 commits
- Merge pull request #2725 from tomponline/tp-lvcreate · c891ab35
  Christian Brauner authored Nov 15, 2018
```
Adds -qq flags to lvcreate commands
```
  c891ab35
- Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the… · d1acfd54
  tomponline authored Nov 14, 2018
```
Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the LVM subsystem asks to avoid hanging lxc-create command
Signed-off-by: tomponline <tomp@tomp.uk>
```
  d1acfd54
09 Nov, 2018 6 commits
- Merge pull request #2723 from 2xsec/bugfix · d25dcf18
  Christian Brauner authored Nov 09, 2018
```
pam_cgfs: remove dependency & redundancy functions
```
  d25dcf18
- utils: add errno logs for exception case · 2f32e37e
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  2f32e37e
- utils: fix coding styles · 7be6bcd5
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  7be6bcd5
- pam_cgfs: remove dependency from cap & log · c4a090be
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  c4a090be
- cgfs: remove redundancy utils · f25a2044
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  f25a2044
- pam_cgfs: remove redundancy file utils · a6de11a7
  2xsec authored Nov 09, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  a6de11a7
08 Nov, 2018 7 commits
- Merge pull request #2722 from brauner/lxc/master · 72da60a6
  Stéphane Graber authored Nov 08, 2018
```
conf: s/ty/tty/g
```
  72da60a6
- conf: s/ty/tty/g · 7d7333b3
  Christian Brauner authored Nov 08, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7d7333b3
- Merge pull request #2720 from 2xsec/bugfix · 891a355f
  Christian Brauner authored Nov 08, 2018
```
replace read & write syscalls with nointr functions
```
  891a355f
- Merge pull request #2721 from 2xsec/tizen · 30acf282
  Christian Brauner authored Nov 08, 2018
```
dlog: move match_dlog_fds()
```
  30acf282
- dlog: move match_dlog_fds() · 1d5e5f26
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  1d5e5f26
- log: replace write with lxc_write_nointr · 809d4449
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  809d4449
- caps: replace read with lxc_read_nointr · 89882306
  2xsec authored Nov 08, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  89882306
06 Nov, 2018 2 commits
- Merge pull request #2719 from ssup2/master · d2b2f629
  Christian Brauner authored Nov 06, 2018
```
Fix spacing error in namespace.c
```
  d2b2f629
- Fix spacing error in namespace.c · 6e055cce
  Jungsub authored Nov 06, 2018
```
Signed-off-by: Jungsub Shin supsup5642@tmax.co.kr
```
  6e055cce
02 Nov, 2018 8 commits
- Merge pull request #2717 from brauner/2018-11-02/fix_android · acf50cfe
  Stéphane Graber authored Nov 02, 2018
```
include: correctly include macro.h
```
  acf50cfe
- include: correctly include macro.h · a9b8dbfa
  Christian Brauner authored Nov 02, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a9b8dbfa
- coverity: move to separate branch · e814299f
  Christian Brauner authored Nov 02, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e814299f
- Merge pull request #2715 from 2xsec/bugfix · 1409ee16
  Christian Brauner authored Nov 02, 2018
```
lxcmntent: coding rules
```
  1409ee16
- Merge pull request #2716 from 2xsec/tizen · 3bcfbee1
  Christian Brauner authored Nov 02, 2018
```
log: fix too wide or inconsistent non-owner permissions
```
  3bcfbee1
- log: fix too wide or inconsistent non-owner permissions · 9b681921
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  9b681921
- string_utils: coding rules · b9bb8bbb
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  b9bb8bbb
- lxcmntent: coding rules · 5f76b90f
  2xsec authored Nov 02, 2018
```
Signed-off-by: 2xsec <dh48.jeong@samsung.com>
```
  5f76b90f
01 Nov, 2018 7 commits
- Merge pull request #2714 from brauner/2018-11-01/remove_accidental_debug_statements · a8c7d037
  Stéphane Graber authored Nov 01, 2018
```
confile: remove debug printf()s
```
  a8c7d037
- confile: remove debug printf()s · 9395c7c2
  Christian Brauner authored Nov 01, 2018
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9395c7c2
- Merge pull request #2713 from brauner/2018-10-30/mount_injection · cb1be30a
  Stéphane Graber authored Nov 01, 2018
```
conf: expand shmounts lxc.mount.auto option
```
  cb1be30a
- lxccontainer: fix temporary path removal · ecce75a6
  Christian Brauner authored Oct 30, 2018
```
Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ecce75a6
- conf: don't setup shared mountpoint for shmounts · 6437f1c1
  Christian Brauner authored Oct 30, 2018
```
Leave it up to the caller for now until we have a clear way to do
this without causing double mounts etc.

Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6437f1c1
- conf: expand shmounts lxc.mount.auto option · 594426ca
  Christian Brauner authored Oct 30, 2018
```
Allow users to specify a path in the container they want to use.
This will help LXD.

Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  594426ca
- Merge pull request #2712 from jsoref/spelling · 007ef61a
  Christian Brauner authored Nov 01, 2018
```
Spelling
```
  007ef61a
31 Oct, 2018 1 commit
- Merge pull request #2710 from 2xsec/tizen · 85610b3a
  Christian Brauner authored Oct 31, 2018
```
dlog: inherit dlog fds
```
  85610b3a
30 Oct, 2018 6 commits
- Merge pull request #2709 from 2xsec/bugfix · 549d0ad2
  Christian Brauner authored Oct 30, 2018
```
storage_utils: add error handling
```
  549d0ad2
- spelling: without · f4a4144e
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  f4a4144e
- spelling: userns · 7ded5fa7
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  7ded5fa7
- spelling: unsigned · ae52f396
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  ae52f396
- spelling: timeout · da43e9e5
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  da43e9e5
- spelling: syscall · 8927207b
  Josh Soref authored Oct 30, 2018
```
Signed-off-by: Josh Soref <jsoref@gmail.com>
```
  8927207b