[libvirt] [PATCH 1/4] Mount fresh instance of sysfs/selinux in LXC

[Eric Blake]

On 05/11/2012 10:48 AM, Daniel P. Berrange wrote:
> From: "Daniel P. Berrange" <berrange at redhat.com>
> 
> Currently to make sysfs readonly, we remount the existing
> instance and then bind it readonly. Unfortunately this means
> sysfs is still showing device objects wrt the host OS namespace.
> We need it to reflect the container namespace, so we must mount
> a completely new instance of it. Do the same for selinuxfs since
> there is no benefit to bind mounting & this lets us simplify
> the code.
> 
> * src/lxc/lxc_container.c: Mount fresh sysfs instance
> 
> Signed-off-by: Daniel P. Berrange <berrange at redhat.com>
> ---
>  src/lxc/lxc_container.c |   32 +++++++++++---------------------
>  1 file changed, 11 insertions(+), 21 deletions(-)
> 

ACK.

-- 
Eric Blake   eblake at redhat.com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 620 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20120514/ed3a9f89/attachment-0001.sig>