Re: [lxc-devel] [PATCH] lxc_spawn: don't close pinfd until container is stopped

2013-09-06 Thread Stéphane Graber
On Fri, Sep 06, 2013 at 12:28:48PM -0500, Serge Hallyn wrote: > Otherwise containers may be able to remount -o ro their rootfs > at shutdown. > > Reported-by: Harald Dunkel > Signed-off-by: Serge Hallyn Acked-by: Stéphane Graber > --- > src/lxc/start.c | 14 +++--- > 1 file changed,

[lxc-devel] [PATCH] lxc_spawn: don't close pinfd until container is stopped

2013-09-06 Thread Serge Hallyn
Otherwise containers may be able to remount -o ro their rootfs at shutdown. Reported-by: Harald Dunkel Signed-off-by: Serge Hallyn --- src/lxc/start.c | 14 +++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/src/lxc/start.c b/src/lxc/start.c index 7ee67ec..e841bac 100