chiark / gitweb /
~ianmdlvl / elogind.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5b590f9) | patch
nspawn: do not invoke RegisterMachine on machined from inside the new PID namespace
authorLennart Poettering <lennart@poettering.net>
Thu, 9 Jan 2014 00:42:57 +0000 (08:42 +0800)
committerLennart Poettering <lennart@poettering.net>
Thu, 9 Jan 2014 00:46:23 +0000 (08:46 +0800)
commit354bfd2b166d1044eea05ac9ba1cda05c93a24bc
tree47f1516819b6926696e04d1f1af201f469e05af1tree | snapshot
parent5b590f97640546962b16b3b32684b3ee6b477f93commit | diff
nspawn: do not invoke RegisterMachine on machined from inside the new PID namespace

On kdbus user credentials are not translated across PID namespaces, but
simply invalidated if sender and receiver namespaces don't match. This
makes it impossible to properly authenticate requests from different PID
namespaces (which is probably a good thing). Hence, register the machine
in the parent and not the client and properly synchronize this.
src/nspawn/nspawn.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.