Re: [libvirt] CVE-2013-6456 Re: [PATCHv2 0/7] lxc: honor mount namespaces

On Tue, 24 Dec 2013 06:29:11 -0700 Eric Blake <eblake(a)redhat.com&gt; wrote: > diff --git i/src/util/virprocess.c w/src/util/virprocess.c > index c99b75a..e069483 100644 > --- i/src/util/virprocess.c > +++ w/src/util/virprocess.c > @@ -879,7 +879,7 @@ virProcessRunInMountNamespace(pid_t pid, > goto cleanup; > } > > - if ((cpid = virFork() < 0)) > + if ((cpid = virFork()) < 0) > goto cleanup; > if (cpid == 0) { > /* child */ Thanks, that solves it. With this extra patch libvirtd writes to the container's /dev/initctl only and terminates child process only.