Re: [libvirt] CVE-2013-6456 Re: [PATCHv2 0/7] lxc: honor mount namespaces
On Tue, 24 Dec 2013 06:29:11 -0700
Eric Blake <eblake(a)redhat.com> wrote:
diff --git i/src/util/virprocess.c w/src/util/virprocess.c
index c99b75a..e069483 100644
--- i/src/util/virprocess.c
+++ w/src/util/virprocess.c
@@ -879,7 +879,7 @@ virProcessRunInMountNamespace(pid_t pid,
goto cleanup;
}
- if ((cpid = virFork() < 0))
+ if ((cpid = virFork()) < 0)
goto cleanup;
if (cpid == 0) {
/* child */
Thanks, that solves it. With this extra patch libvirtd writes to the
container's /dev/initctl only and terminates child process only.
Reco