[PATCH v1 16/34] qemuDomainBuildNamespace: Populate basic /dev from daemon's namespace

Ján Tomko jtomko at redhat.com
Fri Jul 24 15:22:07 UTC 2020


On a Wednesday in 2020, Michal Privoznik wrote:
>As mentioned in previous commit, populating domain's namespace
>from pre-exec() hook is dangerous. This commit moves population
>of the namespace with basic /dev nodes (e.g. /dev/null, /dev/kvm,
>etc.) into daemon's namespace.
>
>Signed-off-by: Michal Privoznik <mprivozn at redhat.com>
>---
> src/qemu/qemu_domain_namespace.c | 23 +++++++++++------------
> src/qemu/qemu_domain_namespace.h |  3 ++-
> src/qemu/qemu_process.c          |  2 +-
> 3 files changed, 14 insertions(+), 14 deletions(-)
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20200724/9c69ac36/attachment-0001.sig>


More information about the libvir-list mailing list