Re: [libvirt] [PATCH 1/4] Mount fresh instance of sysfs/selinux in LXC

From: "Daniel P. Berrange" <berrange(a)redhat.com&gt; Currently to make sysfs readonly, we remount the existing instance and then bind it readonly. Unfortunately this means sysfs is still showing device objects wrt the host OS namespace. We need it to reflect the container namespace, so we must mount a completely new instance of it. Do the same for selinuxfs since there is no benefit to bind mounting & this lets us simplify the code. * src/lxc/lxc_container.c: Mount fresh sysfs instance Signed-off-by: Daniel P. Berrange <berrange(a)redhat.com&gt; --- src/lxc/lxc_container.c | 32 +++++++++++--------------------- 1 file changed, 11 insertions(+), 21 deletions(-)