[systemd-bugs] [Bug 90385] nspawn: block devices passed to --bind/bind-ro are not accessible inside the container
bugzilla-daemon at freedesktop.org
bugzilla-daemon at freedesktop.org
Thu May 14 08:55:15 PDT 2015
https://bugs.freedesktop.org/show_bug.cgi?id=90385
--- Comment #3 from Lennart Poettering <lennart at poettering.net> ---
Comment on attachment 115749
--> https://bugs.freedesktop.org/attachment.cgi?id=115749
patch adapted according to Lennart's implementation suggestions
A couple of fixes:
pleas structly use 8ch space indenting, you appear to indent by 4ch sometimes.
More importantly though, the code for nspawn changed in current git quite a
bind, arg_bind and arg_bind_ro do not exist like this anymore. Please rebase on
current git.
Also, I think this should work the same way for character and block device
nodes. i.e. just checking S_ISBLK() appears to be restrictive.
We currently have two functions is_symlink() and is_dir() in util.[ch]. I think
it would be best to introduce is_device_node() in this style, and move the
stat() check into it, and then look for S_ISBLK() || S_ISCHR()...
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20150514/7d731225/attachment.html>
More information about the systemd-bugs
mailing list