[lxc-devel] 答复: lxc and LD_PRELOAD conflict

2012-02-01 Thread 尹小彪(嵌入式软件事业部)
Additionally,xxx.so depends on libplatform_config.so. 发件人: 尹小彪(嵌入式软件事业部) [yi...@neusoft.com] 发送时间: 2012年2月2日 11:27 收件人: lxc-devel@lists.sourceforge.net 主题: [lxc-devel] lxc and LD_PRELOAD conflict Hi Professors Now I faced a problem.when add LD_PRELA

[lxc-devel] lxc and LD_PRELOAD conflict

2012-02-01 Thread 尹小彪(嵌入式软件事业部)
Hi Professors Now I faced a problem.when add LD_PRELAOD before lxc-execute -n xxx,I will get error info: -- lxc-execute:inherited fd 3 on /proc/platform_config -- Look into the lxc source code and find that lxc does not allow inheriting any fd(in function lxc_s

[lxc-devel] [PATCH] Improve capability handling in LXC

2012-02-01 Thread Christian Seiler
Hi, I've attached patches that improve capability handling in LXC. I stumbled upon the issue that I wanted to deactivate "dmesg" from inside containers with a fairly recent kernel. Instead of dropping CAP_SYS_ADMIN, as it was the case with previous kernel versions, one is now supposed to drop CAP_

[lxc-devel] [PATCH 1/3] Add function to determine CAP_LAST_CAP of the current kernel dynamically

2012-02-01 Thread Christian Seiler
The function lxc_caps_last_cap() determines CAP_LAST_CAP of the current kernel dynamically. It first tries to read /proc/sys/kernel/cap_last_cap. If that fails, because the kernel does not support this interface yet, it loops through all capabilities and tries to determine whether the current capab

[lxc-devel] [PATCH 2/3] Add CAP_SYSLOG and CAP_WAKE_ALARM to list of capabilities

2012-02-01 Thread Christian Seiler
--- src/lxc/conf.c |6 ++ 1 files changed, 6 insertions(+), 0 deletions(-) diff --git a/src/lxc/conf.c b/src/lxc/conf.c index 1a9851e..3fbc0eb 100644 --- a/src/lxc/conf.c +++ b/src/lxc/conf.c @@ -201,6 +201,12 @@ static struct caps_opt caps_opt[] = { { "setfcap", CAP_SET

[lxc-devel] [PATCH 3/3] Accept numeric values for capabilities to drop

2012-02-01 Thread Christian Seiler
lxc.cap.drop now also accepts numeric values for capabilities. This allows the user to specify capabilities LXC doesn't know about yet or capabilities that were not part of the kernel headers LXC was compiled against. --- src/lxc/conf.c | 17 + 1 files changed, 17 insertions(+),