From 864e17068ce9acf418d42a625141884293170952 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 10 Oct 2014 11:11:25 +0200 Subject: [PATCH 1/1] nspawn: actually allow access to /dev/net/tun in the container It's not sufficient to just copy the device node over, we need to update the policy for it too. --- src/nspawn/nspawn.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c index da4c116f3..f04d32613 100644 --- a/src/nspawn/nspawn.c +++ b/src/nspawn/nspawn.c @@ -1558,6 +1558,7 @@ static int register_machine(pid_t pid, int local_ifindex) { "/dev/random", "rwm", "/dev/urandom", "rwm", "/dev/tty", "rwm", + "/dev/net/tun", "rwm", /* Allow the container * access to ptys. However, * do not permit the -- 2.30.2