[systemd-commits] src/nspawn

[Lennart Poettering]

 src/nspawn/nspawn.c |    1 +
 1 file changed, 1 insertion(+)

New commits:
commit 864e17068ce9acf418d42a625141884293170952
Author: Lennart Poettering <lennart at poettering.net>
Date:   Fri Oct 10 11:11:25 2014 +0200

    nspawn: actually allow access to /dev/net/tun in the container
    
    It's not sufficient to just copy the device node over, we need to update
    the policy for it too.

diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c
index da4c116..f04d326 100644
--- a/src/nspawn/nspawn.c
+++ b/src/nspawn/nspawn.c
@@ -1558,6 +1558,7 @@ static int register_machine(pid_t pid, int local_ifindex) {
                                           "/dev/random", "rwm",
                                           "/dev/urandom", "rwm",
                                           "/dev/tty", "rwm",
+                                          "/dev/net/tun", "rwm",
                                           /* Allow the container
                                            * access to ptys. However,
                                            * do not permit the