chiark / gitweb /
nspawn: make sure /dev/kdbus in the container is world accessible
[elogind.git] / src / libsystemd-bus / bus-kernel.c
index 09e084a02f17f31dd652082ca39a96319f4184d1..98fc27cda51445385b51384d596f6a7bca1e01f3 100644 (file)
@@ -1111,7 +1111,7 @@ int bus_kernel_create_namespace(const char *name, char **s) {
         n->type = KDBUS_MAKE_NAME;
 
         make->size = ALIGN8(offsetof(struct kdbus_cmd_ns_make, items) + n->size);
-        make->flags = KDBUS_MAKE_POLICY_OPEN;
+        make->flags = KDBUS_MAKE_POLICY_OPEN | KDBUS_MAKE_ACCESS_WORLD;
 
         if (ioctl(fd, KDBUS_CMD_NS_MAKE, make) < 0) {
                 close_nointr_nofail(fd);
@@ -1121,7 +1121,7 @@ int bus_kernel_create_namespace(const char *name, char **s) {
         if (s) {
                 char *p;
 
-                p = strappend("/dev/kdbus/", name);
+                p = strappend("/dev/kdbus/ns/", name);
                 if (!p) {
                         close_nointr_nofail(fd);
                         return -ENOMEM;