Stefan Hajnoczi fd9279ec99 virtiofsd: probe unshare(CLONE_FS) and print an error ... An assertion failure is raised during request processing if unshare(CLONE_FS) fails. Implement a probe at startup so the problem can be detected right away. Unfortunately Docker/Moby does not include unshare in the seccomp.json list unless CAP_SYS_ADMIN is given. Other seccomp.json lists always include unshare (e.g. podman is unaffected): https://raw.githubusercontent.com/seccomp/containers-golang/master/seccomp.json Use "docker run --security-opt seccomp=path/to/seccomp.json ..." if the default seccomp.json is missing unshare. Cc: Misono Tomohiro <misono.tomohiro@jp.fujitsu.com> Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Message-Id: <20200727190223.422280-4-stefanha@redhat.com> Reviewed-by: Misono Tomohiro <misono.tomohiro@jp.fujitsu.com> Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>		2020-08-28 13:34:52 +01:00
..
50-qemu-virtiofsd.json.in	virtiofsd: add vhost-user.json file	2020-01-23 16:41:36 +00:00
buffer.c	virtiofsd: use fuse_buf_writev to replace fuse_buf_write for better performance	2020-01-23 16:41:37 +00:00
fuse_common.h	virtiofsd: Parse flag FUSE_WRITE_KILL_PRIV	2020-01-23 16:41:37 +00:00
fuse_i.h	virtiofsd: Remove fuse.h and struct fuse_module	2020-02-21 12:53:17 +00:00
fuse_log.c	virtiofsd: Fix common header and define for QEMU builds	2020-01-23 16:41:36 +00:00
fuse_log.h	virtiofsd: Format imported files to qemu style	2020-01-23 16:41:36 +00:00
fuse_lowlevel.c	tools/virtiofsd/fuse_lowlevel: Fix fuse_out_header::error value	2020-02-21 12:53:17 +00:00
fuse_lowlevel.h	virtiofsd: add --rlimit-nofile=NUM option	2020-05-01 18:41:55 +01:00
fuse_misc.h	virtiofsd: support nanosecond resolution for file timestamp	2020-01-23 16:41:37 +00:00
fuse_opt.c	virtiofsd: Fix common header and define for QEMU builds	2020-01-23 16:41:36 +00:00
fuse_opt.h	virtiofsd: Format imported files to qemu style	2020-01-23 16:41:36 +00:00
fuse_signals.c	virtiofsd: convert more fprintf and perror to use fuse log infra	2020-01-23 16:41:37 +00:00
fuse_virtio.c	virtiofsd: probe unshare(CLONE_FS) and print an error	2020-08-28 13:34:52 +01:00
fuse_virtio.h	virtiofsd: cleanup allocated resource in se	2020-01-23 16:41:37 +00:00
helper.c	virtiofsd: Remove "norace" from cmdline help and docs	2020-08-28 13:34:52 +01:00
meson.build	tools/virtiofsd: convert to Meson	2020-08-21 06:30:09 -04:00
passthrough_helpers.h	virtiofsd: Format imported files to qemu style	2020-01-23 16:41:36 +00:00
passthrough_ll.c	virtiofsd: drop CAP_DAC_READ_SEARCH	2020-08-28 13:34:52 +01:00
passthrough_seccomp.c	tools/virtiofsd: convert to Meson	2020-08-21 06:30:09 -04:00
passthrough_seccomp.h	tools/virtiofsd: convert to Meson	2020-08-21 06:30:09 -04:00