Re: [libvirt] [PATCH v2 5/5] Set a security context on /dev and /dev/pts mounts

From: "Daniel P. Berrange" <berrange(a)redhat.com&gt; To allow the container to access /dev and /dev/pts when under sVirt, set an explicit mount option. Also set a max size on the /dev mount to prevent DOS on memory usage * src/lxc/lxc_container.c: Set /dev mount context * src/lxc/lxc_controller.c: Set /dev/pts mount context --- src/lxc/lxc_container.c | 72 +++++++++++++++++++++++++++++++++++----------- src/lxc/lxc_controller.c | 32 ++++++++++++++++++-- 2 files changed, 84 insertions(+), 20 deletions(-) @@ -450,10 +456,8 @@ static int lxcContainerMountBasicFS(const char *srcprefix, bool pivotRoot) char *src = NULL; const char *srcpath = NULL; - VIR_DEBUG("Consider %s onlyPivotRoot=%d", - mnts[i].src, mnts[i].onlyPivotRoot); - if (mnts[i].onlyPivotRoot && !pivotRoot) - continue; + VIR_DEBUG("Process %s -> %s", + mnts[i].src, mnts[i].dst);