The reason for this is because openssl can be statically linked
against, gnutls cannot.
Signed-off-by: Serge Hallyn <shallyn@cisco.com>

doc: add a note about shared ns + LSMs to Japanese doc

Update for commit 8de90384Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>

seccomp: do not set SECCOMP_FILTER_FLAG_NEW_LISTENER

Centralize hook names

Do not set SECCOMP_FILTER_FLAG_NEW_LISTENER as seccomp attribute.
Prior to libseccomp merging support for SECCOMP_RET_USER_NOTIF there was a
libseccomp specific attribute that needed to be set before
SECCOMP_RET_USER_NOTIF could be used. This has been removed.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

The hook string names must not be repeated in the source code to facilitate future changes
Signed-off-by: Rachid Koucha <rachid.koucha@gmail.com>

seccomp: add ifdefine for SECCOMP_FILTER_FLAG_NEW_LISTENER

So that we can deal with older kernels.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

seccomp: s/SCMP_FLTATR_NEW_LISTENER/SECCOMP_FILTER_FLAG_NEW_LISTENER/g

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

seccomp: align with upstream libseccomp

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Align with upstream libseccomp.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

proposed fix for #2892 - fix lxcbasename in lxc/lxccontainer.c

start: generate new boot id on container start

Closes #3027.

BugLink: https://bugs.launchpad.net/bugs/1831258
Cc: Dimitri John Ledkov <xnox@ubuntu.com>
Cc: Scott Moser <smoser@ubuntu.com>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Paul Romlow <paul@romlow.com>

cgroups: prevent segfault

Make /tmp accessible to any user

/tmp created with "rwxrwxrwt" mode
Signed-off-by: Rachid Koucha <rachid.koucha@gmail.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

start: fix handler memory leak at lxc_init failed

Signed-off-by: LiFeng <lifeng68@huawei.com>

lxc_usernsexec: continuing after unshare fails leads to confusing and…

Signed-off-by: Brian McQueen <bmcqueen@linkedin.com>

cgroups: handle offline cpus in v1 hierarchy

lxc-user-net: Failed to convert string " Failed to get group name" to integer

Signed-off-by: Alexander Kriventsov <akriventsov@nic.ru>

lxc_clone: add a comment about stack size

Signed-off-by: Tycho Andersen <tycho@tycho.ws>

Pass zero to clone

This is the default thread size for glibc, so it is reasonable to match
that when we clone().

Mostly this is a science experiment suggested by brauner, and who doesn't
love science?
Signed-off-by: Tycho Andersen <tycho@tycho.ws>

fix issue 2765