chiark
/
gitweb
/
~ianmdlvl
/
elogind.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
5516ae4
)
nspawn: actually allow access to /dev/net/tun in the container
author
Lennart Poettering
<lennart@poettering.net>
Fri, 10 Oct 2014 09:11:25 +0000
(11:11 +0200)
committer
Lennart Poettering
<lennart@poettering.net>
Fri, 10 Oct 2014 09:11:25 +0000
(11:11 +0200)
It's not sufficient to just copy the device node over, we need to update
the policy for it too.
src/nspawn/nspawn.c
patch
|
blob
|
history
diff --git
a/src/nspawn/nspawn.c
b/src/nspawn/nspawn.c
index da4c116f363368888ad42360f228842b8105fa17..f04d32613123f4da9805c9a293b773d39b4e1e1d 100644
(file)
--- a/
src/nspawn/nspawn.c
+++ b/
src/nspawn/nspawn.c
@@
-1558,6
+1558,7
@@
static int register_machine(pid_t pid, int local_ifindex) {
"/dev/random", "rwm",
"/dev/urandom", "rwm",
"/dev/tty", "rwm",
+ "/dev/net/tun", "rwm",
/* Allow the container
* access to ptys. However,
* do not permit the