nspawn: actually allow access to /dev/net/tun in the container

[elogind.git] / src / nspawn / nspawn.c

diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c
index da4c116f363368888ad42360f228842b8105fa17..f04d32613123f4da9805c9a293b773d39b4e1e1d 100644 (file)
--- a/src/nspawn/nspawn.c
+++ b/src/nspawn/nspawn.c
@@ -1558,6 +1558,7 @@ static int register_machine(pid_t pid, int local_ifindex) {
                                           "/dev/random", "rwm",
                                           "/dev/urandom", "rwm",
                                           "/dev/tty", "rwm",
                                           "/dev/random", "rwm",
                                           "/dev/urandom", "rwm",
                                           "/dev/tty", "rwm",

+                                          "/dev/net/tun", "rwm",

                                           /* Allow the container
                                            * access to ptys. However,
                                            * do not permit the
                                           /* Allow the container
                                            * access to ptys. However,
                                            * do not permit the