On 02/28/2014 05:40 AM, Michal Privoznik wrote:
On 20.02.2014 06:13, Eric Blake wrote:
> Some of these patches were written while working on CVE-2013-6456;
> we decided to reorder things and fix that problem first. While
> rebasing these patches to the latest tree, I found other things
> worth fixing.
>
> Eric Blake (10):
> nwfilter: don't ignore child process failures
> virFork: give specific status on failure prior to exec
> util: make it easier to reflect child exit status
> util: preserve exit status from mount namespace callback
> util: make it easier to grab only regular process exit
> util: make it easier to grab only regular command exit
> virFork: simplify semantics
> virt-login-shell: use single instead of double fork
> virt-login-shell: saner exit value
> virsh: report exit status of failed lxc-enter-namespace
>
>
Laine ACKed the first patch in its second version, I'm ACKing the rest
of the patches. But this has a potential to break some stuff, so I
suggest pushing after the release.
After the release, so I've pushed this series now.
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library
http://libvirt.org