[libvirt] [PATCH RFC] LXC: don't RO mount /proc, /sys when user namespce enabled

Chen, Hanxiao chenhanxiao at cn.fujitsu.com
Tue Jan 6 01:45:04 UTC 2015



> -----Original Message-----
> From: libvir-list-bounces at redhat.com [mailto:libvir-list-bounces at redhat.com] On
> Behalf Of Chen Hanxiao
> Sent: Monday, December 22, 2014 11:57 AM
> To: libvir-list at redhat.com
> Subject: [libvirt] [PATCH RFC] LXC: don't RO mount /proc, /sys when user namespce
> enabled
> 
> If we enabled user ns and provided a uid/gid map,
> we do not need to mount /proc, /sys as readonly.
> Leave it to kernel for protection.
> 
> Signed-off-by: Chen Hanxiao <chenhanxiao at cn.fujitsu.com>
> ---

ping




More information about the libvir-list mailing list