Re: [libvirt] CVE-2013-6456 Re: [PATCHv2 0/7] lxc: honor mount namespaces

24 Dec 2013

On Tue, 24 Dec 2013 06:29:11 -0700
Eric Blake <eblake@redhat.com> wrote:
...

diff --git i/src/util/virprocess.c w/src/util/virprocess.c
index c99b75a..e069483 100644
--- i/src/util/virprocess.c
+++ w/src/util/virprocess.c
@@ -879,7 +879,7 @@ virProcessRunInMountNamespace(pid_t pid,
         goto cleanup;
     }
-    if ((cpid = virFork() < 0))
+    if ((cpid = virFork()) < 0)
         goto cleanup;
     if (cpid == 0) {
         /* child */
Thanks, that solves it. With this extra patch libvirtd writes to the
container's /dev/initctl only and terminates child process only.

Reco

    