Re: [lxc-devel] [PATCH 1/1] add c->may_control

2013-09-30 Thread Dwight Engen
On Mon, 30 Sep 2013 10:29:50 -0400 Stéphane Graber wrote: > On Mon, Sep 30, 2013 at 09:53:56AM -0400, Dwight Engen wrote: > > On Fri, 27 Sep 2013 21:01:07 -0500 > > Serge Hallyn wrote: > > > > > This is an api function which will return false if the container > > > is running, and the caller ma

Re: [lxc-devel] [PATCH 1/1] add c->may_control

2013-09-30 Thread Stéphane Graber
On Mon, Sep 30, 2013 at 12:58:47PM -0500, Serge Hallyn wrote: > Quoting Stéphane Graber (stgra...@ubuntu.com): > > On Mon, Sep 30, 2013 at 09:53:56AM -0400, Dwight Engen wrote: > > > On Fri, 27 Sep 2013 21:01:07 -0500 > > > Serge Hallyn wrote: > > > > > > > This is an api function which will retu

Re: [lxc-devel] [PATCH 1/1] add c->may_control

2013-09-30 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > On Mon, Sep 30, 2013 at 09:53:56AM -0400, Dwight Engen wrote: > > On Fri, 27 Sep 2013 21:01:07 -0500 > > Serge Hallyn wrote: > > > > > This is an api function which will return false if the container > > > is running, and the caller may not talk to

Re: [lxc-devel] [PATCH 1/1] add c->may_control

2013-09-30 Thread Stéphane Graber
On Mon, Sep 30, 2013 at 09:53:56AM -0400, Dwight Engen wrote: > On Fri, 27 Sep 2013 21:01:07 -0500 > Serge Hallyn wrote: > > > This is an api function which will return false if the container > > is running, and the caller may not talk to its monitor over its > > command socket. Otherwise - if t

Re: [lxc-devel] [PATCH 1/1] add c->may_control

2013-09-30 Thread Dwight Engen
On Fri, 27 Sep 2013 21:01:07 -0500 Serge Hallyn wrote: > This is an api function which will return false if the container > is running, and the caller may not talk to its monitor over its > command socket. Otherwise - if the container is not running, or > the caller may access it - it returns tr

[lxc-devel] [PATCH 1/1] add c->may_control

2013-09-27 Thread Serge Hallyn
This is an api function which will return false if the container is running, and the caller may not talk to its monitor over its command socket. Otherwise - if the container is not running, or the caller may access it - it returns true. We can use this in several tools early on to prevent the seg